Towards a data-centric view of cloud security

International Conference on Information and Knowledge Management, Proceedings

Volumn , Issue , 2010, Pages 25-32

  Zhou, Wenchao ^a   Sherr, Micah ^b   Marczak, William R ^c   Zhang, Zhuoyao ^a   Tao, Tao ^a   Loo, Boon Thau ^a   Lee, Insup ^a  

^a UNIVERSITY OF PENNSYLVANIA   (United States)

^b GEORGETOWN UNIVERSITY   (United States)

^c UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Cloud security; Declarative networking; Secure data processing; System analysis and forensics

Indexed keywords

DATA CENTRIC; DATA MANAGEMENT; DECLARATIVE NETWORKINGS; DISTRIBUTED QUERY PROCESSING; DISTRIBUTED SYSTEMS; OPERATING SYSTEMS; RESEARCH COMMUNITIES; SECURE DATA; SECURITY ISSUES; SECURITY PROPERTIES; SYSTEM ANALYSIS; VIRTUAL MACHINES;

COMPUTER OPERATING SYSTEMS; KNOWLEDGE MANAGEMENT; NETWORK SECURITY; SYSTEMS ANALYSIS;

DATA HANDLING;

EID: 78651302566     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1871929.1871934     Document Type: Conference Paper

References (44)

1. DS2: Declarative Secure Distributed Systems. http://netdb.cis.upenn.edu/ ds2/.
2. Stanford WebBase. http://diglib.stanford.edu:8091/~testbed/doc2/WebBase/.
3. M. Abadi. Logic in Access Control. In Proc. LICS, 2003.
4. P. Alvaro, T. Condie, N. Conway, K. Elmeleegy, J. Hellerstein, and R. Sears. BOOM Analytics: Exploring Data-Centric, Declarative Programming for the Cloud. In Proc. EuroSys, 2010.
5. The Appleseed Project. http://opensource.appleseedproject.org/.
6. N. Bilton. Price of Facebook Privacy? Start Clicking. The New York Times, 12 May 2010.
7. P. Buneman, S. Khanna, and W. C. Tan. Why and where: A characterization of data provenance. In Proc. ICDT, 2001.
8. M. Christodorescu, R. Sailer, D. L. Schales, D. Sgandurra, and D. Zamboni. Cloud Security is not (just) Virtualization Security. In Proc. CCSW, 2009.
9. T. Condie, D. Chu, J. M. Hellerstein, and P. Maniatis. Evita raced: Metacompilation for declarative networks. In Proc. VLDB, 2008.
10. J. Dean and S. Ghemawat. Mapreduce: Simplified data processing on large clusters. In Proc. OSDI, 2004.
11. J. DeTreville. Binder: A logic-based security language. In Proc IEEE S&P, 2002.
12. *. http://www.joindiaspora.com.
13. J. Dwyer. Four Nerds and a Cry to Arms Against Facebook. The New York Times, 11 May 2010.
14. M. H. Feifei Li and G. Kollios. Dynamic authenticated index structures for outsourced databases. In Proc. SIGMOD, 2006.
15. T. J. Green, G. Karvounarakis, Z. G. Ives, and V. Tannen. Update exchange with mappings and provenance. In Proc. VLDB, 2007.
16. T. J. Green, G. Karvounarakis, and V. Tannen. Provenance semirings. In Proc. PODS, 2007.
17. T. J. Green, G. Karvounarakis, N. E. Taylor, O. Biton, Z. G. Ives, and V. Tannen. ORCHESTRA: Facilitating Collaborative Data Sharing. In Proc. SIGMOD, 2007.
18. A. Haeberlen, P. Kuznetsov, and P. Druschel. PeerReview: Practical Accountability for Distributed Systems. In Proc. SOSP, 2007.
19. R. Hasan, R. Sion, and M. Winslett. The case of the fake picasso: Preventing history forgery with secure provenance. In Proc. FAST, 2009.
20. R. Huebsch, J. M. Hellerstein, N. Lanham, B. T. Loo, S. Shenker, and I. Stoica. Querying the Internet with PIER. In Proc. VLDB, 2003.
21. Z. Ives, N. Khandelwal, A. Kapur, and M. Cakir. Orchestra: Rapid, collaborative sharing of dynamic data. In Proc. CIDR, 2005.
22. M. Jensen, J. Schwenk, N. Gruschka, and L. L. Iacono. On Technical Security Issues in Cloud Computing. In Proc. CLOUD, 2009.
23. G. Karvounarakis, Z. G. Ives, and V. Tannen. Querying data provenance. In Proc. SIGMOD, 2010.
24. B. Lampson, M. Abadi, M. Burrows, and E. Wobber. Authentication in Distributed Systems: Theory and Practice. ACM TOCS, 1992.
25. M. Liu, N. Taylor, W. Zhou, Z. Ives, and B. T. Loo. Recursive computation of regions and connectivity in networks. In Proc. ICDE, 2009.
26. B. T. Loo, T. Condie, J. M. Hellerstein, P. Maniatis, T. Roscoe, and I. Stoica. Implementing Declarative Overlays. In Proc. SOSP, 2005.
27. B. T. Loo, J. M. Hellerstein, I. Stoica, and R. Ramakrishnan. Declarative Routing: Extensible Routing with Declarative Queries. In Proc. SIGCOMM, 2005.
28. W. R. Marczak, S. S. Huang, M. Bravenboer, M. Sherr, B. T. Loo, and M. Aref. SecureBlox: Customizable Secure Distributed Data Processing. In Proc. SIGMOD, 2010.
29. W. R. Marczak, D. Zook, W. Zhou, M. Aref, and B. T. Loo. Declarative reconfigurable trust management. In Proc. CIDR, 2009.
30. R. C. Merkle. Secrecy, Authentication, and Public Key Systems. PhD thesis, Stanford University, 1979.
31. K. Mouratidis, D. Sacharidis, and H. Pang. Partially materialized digest scheme: an efficient verification method for outsourced databases. VLDB Journal, 2009.
32. S. C. Muthukumar, X. Li, C. Liu, J. B. Kopena, M. Oprea, and B. T. Loo. Declarative toolkit for rapid network protocol simulation and experimentation. In SIGCOMM (demo), 2009.
33. E. Mykletun, M. Narasimha, and G. Tsudik. Authentication and integrity in outsourced databases. In Proc. NDSS, 2004.
34. D. Nurmi, R. Wolski, C. Grzegorczyk, G. Obertelli, S. Soman, L. Youseff, and D. Zagorodnov. The Eucalyptus Open-Source Cloud-Computing System. In Proc. CCGRID, 2009.
35. H. Pang and K.-L. Tan. Verifying Completeness of Relational Query Answers from Online Servers. ACM TISSEC, 2008.
36. R. Perez, L. van Doorn, and R. Sailer. Virtualization and Hardware-Based Security. In Proc. IEEE S&P, 2008.
37. H. Raj, R. Nathuji, A. Singh, and P. England. Resource Management for Isolation Enhanced Cloud Services. In Proc. CCSW, 2009.
38. S. Rizvi, A. O. Mendelzon, S. Sudarshan, and P. Roy. Extending query rewriting techniques for fine-grained access control. In Proc. SIGMOD, 2004.
39. M. Sherr, A. Mao, W. R. Marczak, W. Zhou, B. T. Loo, and M. Blaze. A3: An Extensible Platform for Application-Aware Anonymity. In Proc. NDSS, 2010.
40. I. Stoica, R. Morris, D. Karger, M. F. Kaashoek, and H. Balakrishnan. Chord: A Scalable Peer-to-Peer Lookup Service for Internet Applications. In Proc. SIGCOMM, 2001.
41. J. Wei, X. Zhang, G. Ammons, V. Bala, and P. Ning. Managing Security of Virtual Machine Images in a Cloud Environment. In Proc. CCSW, 2009.
42. W. Zhou, Y. Mao, B. T. Loo, and M. Abadi. Unified Declarative Platform for Secure Networked Information Systems. In Proc. ICDE, 2009.
43. W. Zhou, M. Sherr, T. Tao, X. Li, B. T. Loo, and Y. Mao. Efficient querying and maintenance of network provenance at internet-scale. In Proc. SIGMOD, 2010.
44. M. Zuckerberg. From Facebook, Answering Privacy Concerns with New Settings. The Washington Post, 24 May 2010.