Confidentiality as a service - Usable security for the cloud

Proc. of the 11th IEEE Int. Conference on Trust, Security and Privacy in Computing and Communications, TrustCom-2012 - 11th IEEE Int. Conference on Ubiquitous Computing and Communications, IUCC-2012

Volumn , Issue , 2012, Pages 153-162

  Fahl, Sascha ^a   Harbach, Marian ^a   Muders, Thomas ^a   Smith, Matthew ^a  

^a LEIBNIZ UNIVERSITY HANNOVER   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

CLOUD SERVICES; CORPORATE USERS; DATA PROTECTION; FACEBOOK; KEY-MANAGEMENT; NON-TECHNICAL USERS; SECURITY MECHANISM; SYMMETRIC ENCRYPTION; USABLE SECURITY; WORK-FLOWS;

COMPUTER PRIVACY; SECURITY OF DATA; UBIQUITOUS COMPUTING; WEB SERVICES; WINDOWS OPERATING SYSTEM;

DISTRIBUTED DATABASE SYSTEMS;

EID: 84868107467     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/TrustCom.2012.112     Document Type: Conference Paper

References (34)

1. H. Takabi, J. Joshi, and G. Ahn, "Security and Privacy Challenges in Cloud Computing Environments," IEEE Security & Privacy, vol. 8, no. 6, pp. 24-31, nov 2010.
2. R. Chow, P. Golle, M. Jakobsson, E. Shi, J. Staddon, R. Masuoka, and J. Molina, "Controlling Data in the Cloud: Outsourcing Computation Without Outsourcing Control," in Proceedings of the 2009 ACM Workshop on Cloud Computing Security. ACM, 2009, pp. 85-90.
3. L. Fang and K. LeFevre, "Privacy Wizards For Social Networking Sites," in Proceedings of the 19th International Conference on World Wide Web, 2010, pp. 351-360.
4. S. Halevi, D. Harnik, B. Pinkas, and A. Shulman-Peleg, "Proofs of Ownership in Remote Storage Systems," in Proceedings of the 18th ACM Conference on Computer and Communications Security, 2011, pp. 491-500.
5. D. Boyd, "Facebook's Privacy Trainwreck: Exposure, Invasion, and Social Convergence," Convergence: The International Journal of Research into New Media Technologies, vol. 14, no. 1, pp. 13-20, 2008.
6. M. Mulazzani, S. Schrittwieser, M. Leithner, M. Huber, and E. Weippl, "Dark Clouds On The Horizon: Using Cloud Storage as Attack Vector And Online Slack Space," in Proceedings of the 20th USENIX Conference on Security, 2011, p. 5.
7. M. M. Lucas and N. Borisov, "FlyByNight: Mitigating the Privacy Risks of Social Networking," in Proceedings of the 7th ACM Workshop on Privacy in the Electronic Society, 2008, pp. 1-8.
8. R. Baden, A. Bender, N. Spring, B. Bhattacharjee, and D. Starin, "Persona: An Online Social Network With User-defined Privacy," in Proceedings of the ACM SIGCOMM Conference on Data Communication, 2009, pp. 135-146.
9. F. Beato, M. Kohlweiss, and K. Wouters, "Scramble! Your Social Network Data," in Proceedings of the 11th International Conference on Privacy Enhancing Technologies. Springer, 2011, pp. 211-225.
10. Hush Communications Canada Inc., "Hushmail - A Secure Web-based Free Email Service," http://www.hushmail.com/, last access: 14.10.11.
11. A. Ermak, "encipher.it," http://encipher.it - last access 14.11.2011.
12. Reputation.com Inc., http://uprotect.it - last access: 11.11.2011.
13. R. Freudenreich, "Boxcryptor," http://www.boxcryptor.com/ - last access: 14.11.2011.
14. A. Whitten and J. Tygar, "Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0," in USENIX Security, 1999.
15. P. Gutmann, "Plug-and-play PKI: A PKI Your Mother Can Use," in Proceedings of the 12th Conference on USENIX Security Symposium, 2003, p. 4.
16. D. Balfanz, G. Durfee, D. Smetters, and R. Grinter, "In Search of Usable Security: Five Lessons From the Field," IEEE Security & Privacy, vol. 2, no. 5, pp. 19-24, 2004.
17. S. L. Garfinkel and R. C. Miller, "Johnny 2: A User Test of Key Continuity Management With S/MIME And Outlook Express," in Proceedings of the 2005 Symposium on Usable Privacy and Security, 2005, pp. 13-24.
18. S. L. Garfinkel, D. Margrave, J. I. Schiller, E. Nordlander, and R. C. Miller, "How To Make Secure Email Easier to Use," in Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, 2005, pp. 701-710.
19. S. Farrell, "Not Reinventing PKI Until We Have Something Better," IEEE Internet Computing, vol. 15, no. 5, pp. 95-98, 2011.
20. C. Herley and P. Van Oorschot, "A Research Agenda Acknowledging the Persistence of Passwords," Security & Privacy, IEEE, vol. 10, no. 1, pp. 28-36, 2012.
21. S. Garfinkel, "Email-based Identification And Authentication: An Alternative to PKI?" IEEE Security and Privacy, vol. 1, no. 6, pp. 20-26, Nov. 2003.
22. P. Rogaway and D. Wagner, "Comments to NIST concerning AES Modes of Operations: CTR-Mode Encryption," National Institute of Standards and Technologies, pp. 2-5, 2000.
23. Y. Desmedt and Y. Frankel, "Threshold Cryptosystems," in Proceedings of the 9th Annual International Cryptology Conference on Advances in Cryptology. Springer, 1990, pp. 307-315.
24. N. Borisov, I. Goldberg, and D. Wagner, "Intercepting Mobile Communications: The Insecurity of 802.11," in Proceedings of the 7th Annual International Conference on Mobile Computing and Networking. ACM, 2001, pp. 180-189.
25. C. E. Shannon, "Communication Theory of Secrecy Systems," Bell Systems Technical Journal, vol. 28, pp. 656-715, 1949.
26. National Institute of Standards and Technology (NIST), "Advanced Encryption Standard (AES) (FIPS PUB 197)," October 2001.
27. B. Burke, RESTful Java with Jax-RS, 1st ed. O'Reilly, 2009.
28. S. Kamara and K. Lauter, "Cryptographic Cloud Storage," in Financial Cryptography and Data Security, ser. Lecture Notes in Computer Science. Springer, 2010, vol. 6054, pp. 136-149.
29. G. Wang, Q. Liu, and J. Wu, "Hierarchical Attribute-based Encryption For Fine-grained Access Control in Cloud Storage Services," in Proceedings of the 17th ACM Conference on Computer and Communications Security, 2010, pp. 735-737.
30. W. Itani, A. Kayssi, and A. Chehab, "Privacy as a Service: Privacy-Aware Data Storage and Processing in Cloud Computing Architectures," in Eighth IEEE International Conference on Dependable, Autonomic and Secure Computing, 2009, pp. 711-716.
31. "Amazon S3," http://aws.amazon.com/s3/ - last access: 11.11.2011.
32. "Wuala," http://www.wuala.com - last access: 11.11.2011.
33. B. Ramsdell, "RFC 3850: Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.1 - Certificate Handling," Jul 2004.
34. J. Callas, L. Donnerhacke, H. Finney, D. Shaw, and T. R., "RFC 4880: OpenPGP Message Format," 2007.