Policy management as a service: An approach to manage policy heterogeneity in cloud computing environment

Proceedings of the Annual Hawaii International Conference on System Sciences

Volumn , Issue , 2012, Pages 5500-5508

  Takabi, Hassan ^a   Joshi, James B D ^a  

^a UNIVERSITY OF PITTSBURGH   (United States)

Author keywords

Access control; Cloud computing; Heterogeneity; Policy management; Policy management as a service

Indexed keywords

CLOUD COMPUTING; ENVIRONMENTAL MANAGEMENT; NETWORK FUNCTION VIRTUALIZATION;

ACCESS CONTROL POLICIES; CLOUD COMPUTING ENVIRONMENTS; CLOUD ENVIRONMENTS; CLOUD SERVICE PROVIDERS; HETEROGENEITY; POLICY MANAGEMENT; POLICY MANAGEMENT SYSTEMS; SECURITY MECHANISM;

ACCESS CONTROL;

EID: 84857960811     PISSN: 15301605     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HICSS.2012.475     Document Type: Conference Paper

References (20)

1. P. Mell and T. Grance, "The NIST Definition of Cloud Computing. NIST Special Publication 800-145 (Draft)", Retrieved September 10, 2011, from http://csrc.nist.gov/publications/drafts/800-145/Draft-SP-800-145. cloud-definition.pdf
2. Cloud Security Alliance, "Security Guidance for Critical Areas of Focus in Cloud Computing V2.1", Retrieved September 10, 2011, from http://www.cloudsecurityalliance.org/csaguide.pdf.
3. D. Catteddu and G. Hogben, "Cloud Computing: Benefits, risks and recommendations for information security", ENISA 2009; http://www.enisa. europa.eu/act/rm/files/deliverables/cloudcomputing-risk-assessment/atdownload/ fullReport.
4. P. J. Bruening and B. C. Treacy, "Cloud Computing: Privacy, Security Challenges", Bureau of National Affairs, Inc., 2009; www.hunton.com/files/ tbl s47Details/FileUpload265/2488/CloudComputing Bruening-Treacy.pdf.
5. H. Takabi, J. B. D. Joshi, and G. J. Ahn, "Security and Privacy Challenges in Cloud Computing Environments", IEEE Security and Privacy, Vol. 8, No. 6, pp. 25-31, 2010.
6. H. Takabi, J. B. D. Joshi, and G. J. Ahn, "SecureCloud: Towards a Comprehensive Security Framework for Cloud Computing Environments", In Proc. of the 1st IEEE International Workshop Emerging Applications for Cloud Computing (CloudApp 2010), pp. 393-398, Seoul, South Korea, 2010.
7. T. Jaeger and J. Schiffman, "Outlook: Cloudy with a Chance of Security Challenges and Improvements", IEEE Security and Privacy, Vol. 8, No. 1, pp. 77-80, 2010.
8. R. Zhang and L. Liu, "Security Models and Requirements for Healthcare Application Clouds", In Proc. of the 3rd IEEE International Conference on Cloud Computing (Cloud 2010), pp. 268-275, Miami, FL, USA, 2010.
9. N. Gruschka and M. Jensen, "Attack Surfaces: A Taxonomy for Attacks on Cloud Services", In Proc. of the 3rd IEEE International Conference on Cloud Computing (Cloud 2010), pp. 276-279, Miami, FL, USA, 2010.
10. X. Tian, X. Wang, and A. Zhou, "DSP RE-Encryption: A Flexible Mechanism for Access Control Enforcement Management in DaaS", In Proc. of the 2nd IEEE International Conference on Cloud Computing (Cloud 2009), pp. 25-32, Bangalore, India, 2009.
11. M. Jensen, J. Schwenk, N. Gruschka, and L. L. Iacono, "On Technical Security Issues in Cloud Computing", In Proc. of the 2nd IEEE International Conference on Cloud Computing (Cloud 2009), pp. 109-116, Bangalore, India, 2009.
12. B. R. Kandukuri, R. Paturi, and A. Rakshit, "Cloud Security Issues", In Proc. of the 6th IEEE International Conference on Services Computing (SCC'09), pp. 517-520, Bangalore, India, 2009.
13. M. L. Mazurek, P. F. Klemperer, R. Shay, H. Takabi, L. Cranor, and L. Bauer, "Exploring Reactive Access Control", In Proc. of the 29th ACM Conference on Human Factors in Computing Systems (CHI 2011), Vancouver, BC, Canada, May 7-12, 2011.
14. J. Karat, C. M. Karat, C. Brodie, and J. Feng, "Designing Natural Language and Structured Entry Methods for Privacy Policy Authoring", In Proc. of the IFIP TC13 International Conference on Human-Computer Interaction (INTERACT 2005), Rome, Italy, 2005.
15. http://www.research.ibm.com/sparcle
16. http://www.oasis-open.org/committees/tchome.php?wgabbrev=xacml
17. Protocol for Web Description Resources (POWDER): Description Resources http://www.w3.org/TR/powder-dr
18. Protocol for Web Description Resources (POWDER): POWDER-S Vocabulary (WDRS) http://www.w3.org/2007/05/powder-s
19. http://tools.ietf.org/html/draft-hammer-hostmeta-13
20. http://www.w3.org/TR/rif-overview