Data protection models for service provisioning in the cloud

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2010, Pages 183-192

  Lin, Dan ^a   Squicciarini, Anna ^b  

^a Architectural and Environmental Engineering   (United States)

^b PENNSYLVANIA STATE UNIVERSITY   (United States)

Author keywords

Cloud computing; Data privacy

Indexed keywords

CLOUD COMPUTING; CONFIDENTIAL DATA; DATA PROTECTION; HEALTH DATA; KEY COMPONENT; POLICY ENFORCEMENT; POLICY INTEGRATION; SERVICE PROVISIONING;

ACCESS CONTROL; DISTRIBUTED COMPUTER SYSTEMS; SECURITY SYSTEMS;

DATA PRIVACY;

EID: 77954893896     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1809842.1809872     Document Type: Conference Paper

References (41)

1. Extensible access control markup language (XACML) version 2.0. OASIS Standard, 2005.
2. D. Agrawal, J. Giles, K. W. Lee, and J. Lobo. Policy ratification. In Proc. of the IEEE International Workshop on Policies for Distributed Systems and Networks, pages 223-232, 2005.
3. T. Ahmed and A. R. Tripathi. Static verification of security requirements in role based cscw systems. In Proc. of ACM Symposium on Access Control Models and Technologies, pages 196-203, 2003.
4. Giuseppe Ateniese, Randal Burns, Reza Curtmola, Joseph Herring, Lea Kissner, Zachary Peterson, and Dawn Song. Provable data possession at untrusted stores. In Proc. of ACM conference on Computer and communications security, pages 598-609, 2007.
5. Microsoft Azure Platform. http://www.microsoft.com/windowsazure/?wt.srch= 1.
6. M. Backes, M. Duermuth, and R. Steinwandt. An algebra for composing enterprise privacy policies. In Proc. of European Symposium on Research in Computer Security, volume 3193, pages 33-52, 2004.
7. M. Backes, G. Karjoth, W. Bagga, and M. Schunter. Efficient comparison of enterprise privacy policies. In Proc. of ACM Symposium on Applied Computing, pages 375-382, 2004.
8. P. Bonatti, S. D. C. D. Vimercati, and P. Samarati. An algebra for composing access control policies. ACM Transactions on Information and System Security, 5(1):1-35, 2002.
9. G. Bruns, D. S. Dantas, and M. Huth. A simple and expressive semantic framework for policy composition in access control. In Proceedings of the 5th ACM Workshop on Formal Methods in Security Engineering, 2007.
10. A. Cavoukian. Privacy in the clouds. Identity in the Information Society, 1, 2008.
11. RightScale Cloud Computing. Delivered. http://www.rightscale.com/.
12. Google Application Engine. http://code.google.com/appengine/.
13. K. Fisler, S. Krishnamurthi, L. A. Meyerovich, and M. C. Tschantz. Verification and change-impact analysis of access-control policies. In Proc. of the International Conference on Software Engineering, pages 196-205, 2005.
14. M. Fujita, P. C. McGeer, and J. C.-Y. Yang. Multi-terminal binary decision diagrams: An efficient datastructure for matrix representation. Formal Methods in System Design, 10(2-3):149-169, 1997.
15. R. Gellman. Privacy in the clouds: Risks to privacy and confidentiality from cloud computing. World Privacy Forum, 2009.
16. P. T. Jaeger, J. Lin, and J. M. Grimes. Cloud computing and information policy: Computing in a policy cloud? Journal of Information Technology and politics, 5(3), 2009.
17. R. Jagadeesan, W. Marrero, C. Pitcher, and V. Saraswat. Timed constraint programming: a declarative approach to usage control. In Proc. of the ACM SIGPLAN international conference on Principles and practice of declarative programming, pages 164-175, 2005.
18. B. R. Kandukuri, R. P. V., and A. Rakshit. Cloud security issues. In IEEE International Conference on Services Computing (SCC), pages 517-520, 2009.
19. L. M. Kaufman. Data security in the World of Cloud Computing. IEEE Security and Privacy, 7(4):61-64, 2009.
20. M. Lillibridge, S. Elnikety, A. Birrell, M. Burrows, and M. Isard. A cooperative internet backup scheme. In USENIX Annual Technical Conference, General Track, pages 29-41, 2003.
21. D. Lin, P. Rao, E. Bertino, N. Li, and J. Lobo. An approach to evaluate policy similarity. In Proc. of ACM Symposium on Access Control Models and Technologies, pages 1-10, 2007.
22. E. Lupu and M. Sloman. Conflicts in policy-based distributed systems management. IEEE Transactions on Software Engineering, 25(6):852-869, 1999.
23. T. Mather, S. Kumaraswamy, and S. Latif. Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance (Theory in Practice). O' Reilly, 2009.
24. P. Mazzoleni, E. Bertino, and B. Crispo. XACML policy integration algorithms. In Proc. of ACM Symposium on Access Control Models and Technologies, pages 223-232, 2006.
25. M. C. Mont, S. Pearson, and P. Bramhall. Towards accountable management of privacy and identity information. In Proc. of the European Symposium on Research in Computer Security, pages 146-161, 2003.
26. Cloud Computing: Clash of the clouds. The economist. 2009.
27. IEEE International Conference on Cloud Computing. http:// thecloudcomputing.org/2009/2/.
28. S. Pearson and A. Charlesworth. Accountability as a way forward for privacy protection in the cloud. Hewlett-Packard Development Company, 2009.
29. Siani Pearson, Yun Shen, and Miranda Mowbray. A privacy manager for cloud computing. In CloudCom, pages 90-106, 2009.
30. Proofpoint. http://www.proofpoint.com/.
31. P. Rao, D. Lin, E. Bertino, N. Li, and J. Lobo. An algebra for fine-grained integration of xacml policies. In Proc. of ACM Symposium on Access Control Models and Technologies, pages 63-72, 2009.
32. P. Rao, D. Lin, R. Ferrini, E. Bertino, and J. Lobo. A similarity measure for comparing access control policies. In Technical Report, Dept of Computer Science, Purdue University, USA, 2010.
33. B. P. Rimal, E. Choi, and I. Lumb. A taxonomy and survey of Cloud Computing systems. Networked Computing and Advanced Information Management, International Conference on, 0:44-51, 2009.
34. Salesforce. http://www.salesforce.com/.
35. J. Salmon. Louded in uncertainty - The legal pitfalls of cloud computing. Sept 2008.
36. Thomas J. E. Schwarz and Ethan L. Miller. Store, forget, and check: Using algebraic signatures to check remotely administered storage. In IEEE ICDCS, International Conference on Distributed Systems, page 12, 2006.
37. Amazon Web Services. http://aws.amazon.com/.
38. W. Tang. On using encryption techniques to enhance sticky policies enforcement. Technical Report (TR-CTIT-08-64), Centre for Telematics and Information Technology, 2008.
39. Q. Wang, C. Wang, J. Li, K. Ren, and W. Lou. Enabling public verifiability and data dynamics for storage security in cloud computing. In ESORICS, pages 355-370, 2009.
40. Workday. http://www.workday.com/.
41. N. Zhang, M. Ryan, and D. P. Guelev. Evaluating access control policies through model checking. In Proc. of the Information Security Conference, pages 446-460, 2005.