We investigated building a chain of trust between image producers (users) and cloud providers. An endorser role is defined as the middle agent who checks the integrity of the images. We implemented a solution using a virtual machine image catalogue (VMIC) originally developed at CERN which allows a provider or endorser to provide a list of the images they have approved for distribution. We extended it to provide a way to sign the list of images and the images themselves in order to provide trust. Finally, we added the distribution framework to allow catalogue owners to import the approved images from other catalogues.

Presentation

Honors Thesis Defense - April 29, 2011
Clemson, SC
Distributing and Trusting Images between Cloud Providers Thesis (PDF) Presentation (PDF)