Designing cloud services adhering to government privacy laws

Proceedings - 10th IEEE International Conference on Computer and Information Technology, CIT-2010, 7th IEEE International Conference on Embedded Software and Systems, ICESS-2010, ScalCom-2010

Volumn , Issue , 2010, Pages 930-935

  Doelitzscher, Frank ^a   Reich, Christoph ^a   Sulistio, Anthony ^a  

^a FURTWANGEN UNIVERSITY   (Germany)

Author keywords

Cloud computing; Data security; IT compliance; Privacy

Indexed keywords

CLOUD COMPUTING; CLOUD DATA; CLOUD PROVIDERS; CLOUD SERVICES; DATA SECURITY; IT COMPLIANCE; IT STANDARDS; ON-DEMAND SERVICES; PAY-PER-USE; PRIVACY; PRIVACY AND SECURITY; PRIVACY LAW; SECURITY AND PRIVACY; SECURITY ASSURANCE; SECURITY MANAGEMENT; SECURITY MODEL; SMALL AND MEDIUM-SIZED ENTERPRISE; VIRTUAL ENVIRONMENTS;

DATA PRIVACY; EMBEDDED SOFTWARE; EMBEDDED SYSTEMS; GRID COMPUTING; INDUSTRY; VIRTUAL REALITY;

INFORMATION TECHNOLOGY;

EID: 78249269487     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CIT.2010.172     Document Type: Conference Paper

References (26)

1. Cloud Security Alliance, "Security Guidance for Critical Areas of Focus in Cloud Computing v2.1," December 2009.
2. Gartner, "Assessing the Security Risks of Cloud Computing," June 2008.
3. L. J. Sotto, B. C. Treacy, and M. L. McLellan, "Privacy and Data Security Risks in Cloud Computing," in Electronic Commerce & Law Report, Feb. 2010.
4. Council Directive 2002/58/EC, "On the protection of individuals with regard to the processing of personal data and on the free movement of such data," Official Journal L 281 pp. 31-50, October 24, 1995.
5. IT Infrastructure Library, http://www.itil.org, February 2010.
6. International Organisation on Standardization, "Iso 27001:2005," http://iso.org February 2010.
7. German Parliament, German Data Protection Act. ISBN: 3406561632: Deutscher Taschenbuch Verlag, February 2010.
8. Anthony Sulistio and Christoph Reich and Frank Dölitzscher, "Cloud Infrastructure & Applications - CloudIA," in Proceedings of the 1st International Conference on Cloud Computing (CloudCom'09), Beijing, China, Dec. 1-4 2009.
9. Frank Doelitzscher and Anthony Sulistio and Christoph Reich and Hendrik Kuijs and David Wolf, "Private Cloud for Collaboration and e-Learning Services: from IaaS to SaaS," Hochschule Furtwangen University, Tech. Rep. CRL-2010-01, Feb. 2010.
10. H. F. Tipton and M. Krause, Information security management handbook, 6th ed., H. F. Tipton and M. Krause, Eds. Auerbach Publications, 2008, vol. 2.
11. Craig Centry, "A Fully Homorphic Encryption Scheme," Ph.D. dissertation, Stanford University, September 2009.
12. Trusted Computing Group, "Trusted Platform Module (TPM) Summary," Whitepaper, April 2008.
13. K. Schmeh, Kryptografie Verfahren, Protokolle, Infrastrukturen. dpunkt-Verlag Heidelberg, 2007.
14. D. Cooper et al., "X.509 PKI Certificate and Certificate Revocation List (CRL) Profile, RFC 5280," http://www.ietf.org/rfc/rfc5280.txt, May 2008.
15. German National Research and Education Network, " Zertifizierungsrichtlinie der dfn-pki v2.2," http://www.pki.dfn.de/ fileadmin/PKI/DFN-PKICPv22.pdf, February 2010.
16. Internet Engineering Task Force, "Public-Key Infrastructure," http://www.ietf.org/dyn/wg/charter/pkix-charter.html, September 2009.
17. M. Myers, R. Ankney, A. Malpani, S. Galperin, and C. Adams, "X.509 internet public key infrastructure online certificate status protocol - ocsp," rfc 2560 (proposed standard), internet engineering task force," http://www.ietf.org/rfc/rfc2560.txt.
18. S. Pearson, "Taking Account of Privacy when Designing Cloud Computing Services," in Proceedings of the ICSE Workshop on Software Engineering Challenges of Cloud Computing, Vancouver, Canada, May 23 2009.
19. McAfee, "Effective Management of Anti-Virus and Security Solutions for Smaller Businesses," Whitepaper, 2004.
20. W. Itani, A. Kayssi, and A. Chehab, "Privacy as a Service: Privacy-Aware Data Storage and Processing in Cloud Computing Architectures," in Proceedings of the International Workshop on Security in Cloud Computing (SCC'09), Chengdu, China, Dec. 12-14 2009.
21. S. Berger, R. Cáceres, K. A. Goldman, R. Perez, R. Sailer, and L. van Doorn, "vTPM: Virtualizing the Trusted Platform Module," in Proceedings of the 15th conference on USENIX Security Symposium, July 31 - August 04 2006.
22. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh, "Terra: A Virtual Machine-Based Platform for Trusted Computing," ACM SIGOPS Operating Systems Review, vol. 37, no. 5, pp. 193-206, 2003.
23. S. Pearson, Y. Shen, and M. Mowbray, "A Privacy Manager for Cloud Computing," in Proceedings of the 1st International Conference on Cloud Computing (CloudCom'09), Beijing, China, Dec. 1-4 2009.
24. A.-R. Sadeghi, C. Stüble, and N. Pohlmann, "European Multilateral Secure Computing Base - Open Trusted Computing for You and Me," Datenschutz und Datensicherheit, vol. 09, pp. 548-554, 2004.
25. B. Pfitzmann, J. Riordan, C. Stübe, and M. Waidner, "The perseus system architecture," IBM Research Division, Tech. Rep., 2001.
26. J. Hu and A. Klein, "A Benchmark of Transparent Data Encryption for Migration of Web Applications in the Cloud," in Proceedings of the International Workshop on Security in Cloud Computing (SCC'09), Chengdu, China, Dec. 12-14 2009.