CloudCoT: A Blockchain-Based Cloud Service Dependency Attestation Framework

The security of cloud infrastructure is an important issue. Many solutions have been proposed to protect the integrity of cloud infrastructure through integrating Trusted Computing hardware. However, these existing solutions suffer from high complexity, repetition and latency. In this paper, we propose a blockchain based cloud service dependency attestation framework–CloudCoT (Cloud Chain-of-Trust). With CloudCoT which combines trusted computing and blockchain technology, cloud users are able to automatically extract the valid dependency of their applications deployed on cloud. And they can attest the valid dependency with low latency through its measurement mechanism and verification mechanism. In addition to the decentralized features, we can see that CloudCoT has higher efficiency while maintaining strong safety in experimental evaluation.