Security prospects through cloud computing by adopting multiple clouds

Proceedings - 2011 IEEE 4th International Conference on Cloud Computing, CLOUD 2011

Volumn , Issue , 2011, Pages 565-572

  Jensen, Meiko ^a   Schwenk, Jörg ^a   Bohli, Jens Matthias ^b   Gruschka, Nils ^b   Iacono, Luigi Lo ^c  

^a RUHR UNIVERSITY BOCHUM   (Germany)

^b NEC LABORATORIES EUROPE   (Germany)

^c European University of Applied Sciences   (Germany)

Author keywords

Application partitioning; Cloud; Intercloud; Multi party computation; Security; Tier partitioning

Indexed keywords

APPLICATION PARTITIONING; INTERCLOUD; MULTIPARTY COMPUTATION; SECURITY; TIER PARTITIONING;

CLOUDS;

CLOUD COMPUTING;

EID: 80053153446     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CLOUD.2011.85     Document Type: Conference Paper

References (33)

1. Amazon Web Services Blog, "Amazon S3 - Bigger and Busier Than Ever." [Online]. Available: http://aws.typepad.com/aws/2011/01/amazon-s3- bigger-and-busier-than-ever.html
2. Gartner, "Gartner Executive Programs Worldwide Survey of More Than 2, 000 CIOs Identifies Cloud Computing as Top Technology Priority for CIOs in 2011." [Online]. Available: http://www.gartner.com/it/page.jsp?id=1526414
3. P. Mell and T. Grance, "The NIST Definition of Cloud Computing, Version 15," National Institute of Standards and Technology, Information Technology Laboratory, 2010. [Online]. Available: http://csrc.nist.gov/groups/ SNS/cloud-computing/
4. Amazon Web Services, "Amazon Elastic Compute Cloud (Amazon EC2)." [Online]. Available: http://aws.amazon.com/ec2/
5. -, "Amazon Simple Storage Service (Amazon S3)." [Online]. Available: http://aws.amazon.com/s3/
6. Savvis, "Savvis Symphony." [Online]. Available: http://www.savvisknowscloud.com/services/
7. RackSpace, "RackSpace Cloud." [Online]. Available: http://www.rackspacecloud.com/index.php
8. Google, "Google App Engine." [Online]. Available: https://appengine.google.com
9. Microsoft, "Windows Azure." [Online]. Available: http://www.microsoft.com/windowsazure/
10. Cloudscale, "The Cloudscale Platform." [Online]. Available: http://cloudscale.com/
11. SalesForce, "SalesForce." [Online]. Available: http://www.salesforce.com/
12. Google, "Google Docs." [Online]. Available: https://www.google.com/docs
13. Zoho, "Zoho Productivity Applications." [Online]. Available: http://www.zoho.com/
14. F. Gens, "IT Cloud Services User Survey, pt.2: Top Benefits & Challenges," Blog post on IDC Survey, 2008. [Online]. Available: http://blogs.idc.com/ie/?p=210
15. D. Hubbard and M. Sutton, "Top Threats to Cloud Computing V1.0," Cloud Security Alliance, 2010. [Online]. Available: http://www.cloudsecurityalliance.org/topthreats
16. M. Jensen, J. Schwenk, N. Gruschka, and L. Lo Iacono, "On technical security issues in cloud computing," in Proceedings of the IEEE International Conference on Cloud Computing (CLOUD-II), 2009.
17. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage, "Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds," in CCS '09: Proceedings of the 16th ACM conference on Computer and communications security. New York, NY, USA: ACM, 2009, pp. 199-212.
18. N. Gruschka and L. Lo Iacono, "Vulnerable Cloud: SOAP Message Security Validation Revisited," in ICWS '09: Proceedings of the IEEE International Conference on Web Services. Los Angeles, USA: IEEE, 2009.
19. M. McIntosh and P. Austel, "XML signature element wrapping attacks and countermeasures," in SWS '05: Proceedings of the 2005 workshop on Secure web services. New York, NY, USA: ACM Press, 2005, pp. 20-27.
20. J. Kincaid, "Google privacy blunder shares your docs without permission," TechCrunch, 2009. [Online]. Available: http://techcrunch.com/ 2009/03/07/huge-google-privacy-blunder-shares-your-docs-without-permission/
21. J. Somorovsky, M. Heiderich, M. Jensen, J. Schwenk, N. Gruschka, and L. Lo Iacono, "Breaking the clouds - security analysis of cloud management interfaces," (in submission), 2011.
22. D. Bernstein, E. Ludvigson, K. Sankar, S. Diamond, and M. Morrow, "Blueprint for the intercloud - protocols and formats for cloud computing interoperability," Internet and Web Applications and Services, International Conference on, vol. 0, pp. 328-336, 2009.
23. A. Celesti, F. Tusa, M. Villari, and A. Puliafito, "How to enhance cloud architectures to enable cross-federation," in 2010 IEEE 3rd International Conference on Cloud Computing (CLOUD). Los Alamitos, CA, USA: IEEE Computer Society, 2010, pp. 337-345.
24. R. Turpin and B. A. Coan, "Extending binary byzantine agreement to multivalued byzantine agreement," Inf. Process. Lett., vol. 18, no. 2, pp. 73-76, 1984. (Pubitemid 14570886)
25. I. Koren and C. M. Krishna, Fault-Tolerant Systems. Morgan Kaufmann, 2007.
26. J. D. Wisner, G. K. Leong, and K.-C. Tan, Principles of Supply Chain Management: A Balanced Approach. SouthWestern College Pub, 2011.
27. J. Vijayan, "Vendors tap into cloud security concerns with new encryption tools." [Online]. Available: http://www.cio.com.au/article/ 376252/vendors-tap-into-cloud-security-concerns-new-encryption-tools/
28. A. C. Yao, "Protocols for secure computations," in Proceedings of the 23rd Annual IEEE Symposium on Foundations of Computer Science, FOCS'82. IEEE Computer Society, 1982, pp. 160-164.
29. A. Shamir, "How to share a secret," Commun. ACM, vol. 22, pp. 612-613, 1979.
30. I. Damgård, M. Geisler, M. Krøigaard, and J. B. Nielsen, "Asynchronous multiparty computation: Theory and implementation," in Public Key Cryptography, PKC '09, ser. Lecture Notes in Computer Science. Springer, 2009, pp. 160-179.
31. M. Burkhart, M. Strasser, D. Many, and X. Dimitropoulos, "SEPIA: Privacy-Preserving Aggregation of Multi-Domain Network Events and Statistics," in USENIX Security Symposium, 2010.
32. N. A. Lynch, Distributed Algorithms. Morgan Kaufmann, 1996.
33. P. Bogetoft, D. L. Christensen, I. Damgrd, M. Geisler, T. P. Jakobsen, M. Krigaard, J. D. Nielsen, J. B. Nielsen, K. Nielsen, J. Pagter, M. I. Schwartzbach, and T. Toft, "Secure multiparty computation goes live." in Financial Cryptography and Data Security, FC'09, ser. Lecture Notes in Computer Science, R. Dingledine and P. Golle, Eds., vol. 5628. Springer, 2009, pp. 325-343.