Openstack-Security-Benchmark (OSB)

This repository contains controls implementation of a subset of recommendation from paper "An Assessment as a Service solution applied to the OpenStack use case" submitted for IEEE CLOUD 2017.

In the repository for each recommendation we provide ii) Control flow φ (control.py) and the relative Parameters λ (parameters) associated with the flow’s operations, iii) Environment π (environemtn) requirements if available.

The available recommendation controls are the following:

1. Maintain Time Synchronization Services

   • control.py
   • parameters
   • environment

2. Do Not Use or Set Guest Customization Passwords

   • Control₁
   • Control₂

3. Evaluate Cloud Architecture Dependencies

   • control.py
   • parameters
   • environment

4. Central Directory for Authentication and Authorization

   • control.py
   • parameters
   • environment

5. Control Cinder fixed_key - C₂

   • control.py
   • parameters
   • environment