(Français) Projet TRUSTINCloudS

Cybersecurity of Cloud infrastructures

— Preview

Development of solutions for the major cybersecurity challenges specific to Cloud environments, to ensure the confidentiality, integrity and availability of data, applications and services

Aymen Boudguiga

Keywords : Privacy, Integrity, Application, Data, Cloud

Missions

Publications

Partners

Project website

The work carried out in this project aims to adapt traditional security mechanisms (e.g. PEPR Cyber) to the characteristics of the Cloud, in order to deal with the threats specific to different types of Cloud (IaaS, PaaS, …). The main objective of TRUSTINCloudS is to study and develop new methodologies for strengthening Cloud security, and to implement them in platforms in order to build a sovereign and trusted Cloud. It will also raise awareness of the possibilities and limitations of these methodologies. The project is organized in such a way as to work on the one hand on the security of infrastructures, and on the other on the security of the data that these infrastructures host. The project will carry out scientific work on these two major themes, with the aim of developing new methods and tools for securing infrastructures and data. Where relevant, this theoretical work will give rise to prototype implementations for proof-of-concept purposes. We will be using the shared SILECS infrastructure of the PEPR Cloud.

— Missions

— Our researches

The project is organized into 6 work packages. The first work package (WP 0) is dedicated to the management, monitoring and smooth running of the project.

Identification and management of infrastructure cyber risks

Specifies methods for risk analysis, threat identification and auditing of dynamic and collaborative Cloud infrastructures

Protection, detection and response for infrastructure

Proposes security policies for these infrastructures, and in particular studies the protection, detection and incident response mechanisms to be applied. It defines countermeasures to the risks identified in WP 1, to ensure that these do not lead to malicious activities or cyber-attacks.

Identifying and managing cyber risks to data

Identifies the risks associated with data managed in the Cloud. It specifies data management methods, studies their ethical uses and assesses users’ acceptability of them.

Data protection, detection and response

Specifies protection solutions for sensitive data using cryptographic techniques or distributed registers

Experiments

Prototyping and validation through proofs of concept

— Partners

Consortium

CEA, IMT, EURECOM, Inria, Université Toulouse 3 Paul Sabatier, Université d’Aix-Marseille, Université de Lorraine, Université Toulouse Capitole, CNRS

— Research team

29 Permanent staff (not financed by the project)
30 Project-funded staff, including :
20 PhD students
9 post-docs
1 engineer

Our teams in France

— Publications



        
            Contact

            
        
        
            Domains
        
            Keywords
Amp Answer set programming Artificial Intelligence Artificial Intelligence Act Behaviour analysis Cloud security Compliance Compliance-by-Design Context Cross-cloud Cyber Resilience Act Cybersecurity Cybersecurity training task models user context Dataset Denial of Service Differential Digital legislation Distributed Hash Table Défense par cible mouvante EU Regulation 
Compliance2
Amp1
Answer set programming1
Artificial Intelligence1
Artificial Intelligence Act1
Behaviour analysis1
Cloud security1
Compliance-by-Design1
Context1
Cross-cloud1
Cyber Resilience Act1
Cybersecurity1
Cybersecurity training task models user context1
Dataset1
Denial of Service1
Differential1
Digital legislation1
Distributed Hash Table1
Défense par cible mouvante1
EU Regulation1
European Union Regulation1
Fairness1
Federated Learning1
Federated Learning Fairness Fully Homomorphic Encryption Privacy Attacks Differential1
Fully Homomorphic Encryption1
IPFS1
Identity and access management1
Intent-based security1
Law &ampamp1
Living-off-the-land attacks1
MTD1
Micro-segmentation1
Network security architecture1
P2P network1
Privacy Attacks1
Processus de décision markoviens faiblement couplés1
Restless Bandit1
Security automation1
Self-sovereign identities1
Software Development1
Software Engineering1
Software Regulation1
Software documentation1
Sybil Attack1
Task models1
Technology1
Training1
User1
Zero-trust architecture1

        
            Authors
Laborde Romain4
Ferreira Afonso4
Benzekri Abdelmalek3
Boudguiga Aymen2
Sirdey Renaud2
Canavese Daniele2
Charreaux Pierre2
Sailhan Francoise2
Vaton Sandrine2
Kandi Mohamed Ali2
Reiffers-Masson Alexandre2
Bendoukha Adda-Akram1
Bultel Jean-Paul1
Checri Marina1
Laraba Abir1
Verdier Antonin1
Ben Haj Salah Mohamed-Amine1
Monsoro Nathan1
Demirag Didem1
Gambs Sébastien1
Saubanère Théo1
Laraba Abir1
Martinie Célia1
Palanque Philippe1
Kaaniche Nesrine1
Cholez Thibault1
Goldman Alfredo1
Ignat Claudia-Lavinia1

        
            Affiliated authors
        
            Journals
        
            Year of production
        
            Institutions
Université Toulouse - Jean Jaurès6
Université Toulouse III - Paul Sabatier6
Institut National Polytechnique (Toulouse)6
Université Toulouse Capitole6
École Nationale d'Ingénieurs de Brest2
Université de Bretagne Sud2
Université de Brest2
École Nationale Supérieure de Techniques Avancées Bretagne2
Université Paris-Saclay2
IMT Atlantique2
Universidade de São Paulo1
Institut National de Recherche en Informatique et en Automatique1
Centre National d'Études Spatiales [Toulouse]1
Télécom SudParis1
Université du Québec à Montréal = University of Québec in Montréal1
Université de Lorraine1

       
            Laboratories
       
            Departments
       
            Research team
    11 documents

Conference papers9 documents
Adda-Akram Bendoukha, Didem Demirag, Nesrine Kaaniche, Aymen Boudguiga, Renaud Sirdey, et al.. Towards privacy-preserving and fairness-aware federated learning framework. Privacy Enhancing Technologies (PETs), Jul 2025, Washinghton, DC, United States. pp.845-865, ⟨10.56553/popets-2025-0044⟩. ⟨hal-04782394⟩
Daniele Canavese, Romain Laborde, Abir Laraba, Afonso Ferreira, Abdelmalek Benzekri. Game of Zones: An Automated Intent-Based Network Micro-segmentation Methodology. 38th IEEE/IFIP Network Operations and Management Symposium (NOMS 2025), May 2025, Honolulu, HI, United States. ⟨hal-04948011⟩
Antonin Verdier, Romain Laborde, Abir Laraba, Abdelmalek Benzekri. DID U Misbehave? A New Dataset for In-Depth Understanding of Inconspicuous Software. 2024 8th Cyber Security in Networking Conference (CSNet), Dec 2024, Paris, France. pp.205-212, ⟨10.1109/CSNet64211.2024.10851723⟩. ⟨hal-04957256⟩
Mohamed-Amine Ben Haj Salah, Romain Laborde, Abdelmalek Benzekri, Mohamed Ali Kandi, Afonso Ferreira. Identity management in cross-cloud environments: Towards self-sovereign identities using current solutions. Proceedings of CRISIS 2024 - The 19th International Conference on Risks and Security of Internet and Systems, Nov 2024, Aix-en-Provence, France. ⟨hal-04668399⟩
Marina Checri, Renaud Sirdey, Aymen Boudguiga, Jean-Paul Bultel. On the practical CPA$^D$ security of “exact” and threshold FHE schemes and libraries. Crypto 2024 - 44th Annual International Cryptology Conference, Aug 2024, Santa Barbara, United States. pp.3-33, ⟨10.1007/978-3-031-68382-4_1⟩. ⟨cea-04706832⟩
Thibault Cholez, Claudia-Lavinia Ignat. Sybil Attack Strikes Again: Denying Content Access in IPFS with a Single Computer. ARES 2024: The 19th International Conference on Availability, Reliability and Security, Jul 2024, Vienna, Austria. pp.1-7, ⟨10.1145/3664476.3664482⟩. ⟨hal-04666290⟩
Nathan Monsoro, Célia Martinie, Philippe Palanque, Théo Saubanère. A Systematic Task and Knowledge-Based Process to Tune Cybersecurity Training to User Learning Groups: Application to Email Phishing Attacks. 18th International Symposium on Human Aspects of Information Security and Assurance, IFIP Work Group 11.12, Jul 2024, Skövde, Sweden. pp.165-179, ⟨10.1007/978-3-031-72559-3_12⟩. ⟨hal-04727127⟩
Pierre Charreaux, Alexandre Reiffers-Masson, Francoise Sailhan, Sandrine Vaton. Mélange de ports et d’IP par processus de décision markoviens min-max. AlgoTel 2024 : 26èmes Rencontres Francophones sur les Aspects Algorithmiques des Télécommunications, May 2024, Saint-Briac-sur-Mer, France. ⟨hal-04564677v2⟩
Pierre Charreaux, Alexandre Reiffers-Masson, Francoise Sailhan, Sandrine Vaton. Minmax Restless Bandits for Efficient Moving Target Defense. RESSI 2024 : Rendez-vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2024, Eppe-Sauvage, France. ⟨hal-04564665v2⟩

Preprints, Working Papers2 documents
Afonso Ferreira, Alfredo Goldman. ComplOps Research: Navigating the Digital Regulation Revolution. 2025. ⟨hal-04930047⟩
Daniele Canavese, Afonso Ferreira, Romain Laborde, Mohamed Ali Kandi. Artificial Intelligence Systems in the European Union: Guidelines and Architectures for Compliance-by-Design. 2024. ⟨hal-04794994⟩

Other projects

CARECloud

Understanding, improving and reducing the environmental impact of cloud computing

Read more

Archi-CESAM

Efficient and safe converged architecture based on near-memory gas pedals / Archi-CESAM

Read more

DiVa

Virtualized disaggregation

Read more

Taranis

Model, deploy, orchestrate and optimize cloud applications and infrastructures

Read more

PEPR Cloud projects

Spirec

Multi-level supervision and prediction for geo-distributed and heterogeneous infrastructures in the Cloud/Edge/IoT continuum

Read more

Steel

Efficient and secure data storage and processing on cloud-based infrastructures

Read more

Silecs

Super Infrastructure for Large-Scale Experimental Computer Science for Cloud/Edge/IoT

Read more

TrustinCloudS

Cloud infrastructure security

Read more

(Français) Projet TRUSTINCloudS

— Partners

— Publications

Contact

Domains

Keywords

Authors

Affiliated authors

Journals

Year of production

Institutions

Laboratories

Departments

Research team

Conference papers9 documents

Preprints, Working Papers2 documents

CARECloud

Archi-CESAM

DiVa

Taranis

PEPR Cloud projects

Spirec

Steel

Silecs

TrustinCloudS

FORMULAIRE D'ABONNEMENT

Inscrivez-vous pour recevoir chaque trimestre la Newsletter du PEPR Cloud.

- Piloté par

- Financé par

- Opéré par

- Managed by

- Financed by

- Operated by