Data confidentiality using fragmentation in cloud computing

International Journal of Pervasive Computing and Communications

Volumn 9, Issue 1, 2013, Pages 37-51

  Hudic, Aleksandar ^a   Islam, Shareeful ^b   Kieseberg, Peter ^a   Rennert, Sylvi ^a   Weippl, Edgar R ^a  

^a SBA Research GGmbH   (Austria)

^b UNIVERSITY OF EAST LONDON   (United Kingdom)

Author keywords

Cloud computing; Computing; Data confidentiality; Data fragmentation; Data management; Data outsourcing; Privacy preserving

Indexed keywords

EID: 84878829696     PISSN: 17427371     EISSN: 1742738X     Source Type: Journal    
DOI: 10.1108/17427371311315743     Document Type: Article

References (31)

1. Abdalla, M., Bellare, M., Catalano, D., Kiltz, E., Kohno, T., Lange, T., Malone-Lee, J., Neven, G., Paillier, P., Shi, H. (2008), "Searchable encryption revisited: consistency properties, relation to anonymous IBE, and extensions" in J. Cryptol., Vol. 21, No. 3, pp. 350-91.
2. Amazon (2006), Amazon Elastic Compute Cloud (amazon ec2), available at: http://aws.amazon.com/ec2/ (accessed May 1, 2012).
3. Bin, H., Yuxing, P. (2010), "A novel metadata management scheme in cloud computing" in International Conference on Software Technology and Engineering (ICSTE), pp. V1-433-8.
4. Buyya, R., Yeo, C.S., Venugopal, S., Broberg, J., Brandic, I. (2009), "Cloud computing and emerging it platforms: vision, hype, and reality for delivering computing as the 5th utility" in Future Gener. Comput. Syst., Vol. 25, No. 6, pp. 599-616.
5. Chen, Y., Paxson, V., Katz, R.H. (2010), "Whats new about cloud computing security?", EECS Department, University of California, Berkeley, CA, Tech. Report UCB/EECS-2010-5.
6. Chow, R., Golle, P., Jakobsson, M., Shi, E., Staddon, J., Masuoka, R., Molina, J. (2009), "Controlling data in the cloud: outsourcing computation without outsourcing control" in Proceedings of the 2009 ACM Workshop on Cloud Computing Security, ACM, New York, NY, pp. 85-90.
7. Ciriani, V., De Capitani Di Vimercati, S., Foresti, S., Jajodia, S., Paraboschi, S., Samarati, P. (2010), "Combining fragmentation and encryption to protect privacy in data storage" in ACM Trans. Inf. Syst. Secur., Vol. 13, No. 3, pp. 22:1-22:33.
8. Curran, K., Carlin, S., Adams, M. (2011), "Security issues in cloud computing" in Elixir, Vol. 38, No. 1, pp. 4069-72.
9. Damiani, E., De Capitani Vimercati, S., Jajodia, S., Paraboschi, S., Samarati, P. (2003), "Balancing confidentiality and efficiency in untrusted relational DBMSs" in Proceedings of the 10th ACM Conference on Computer and Communications Security, CCS '03, ACM, New York, NY, pp. 93-102.
10. Electronic Privacy Information Center (1972), The Code of Fair Information Practices, available at: www.epic.org/privacy/consumer (accessed March 8, 2012).
11. Google (2008), "Google app engine", available at: http://code.google.com/appengine/ (accessed July 1, 2011).
12. Greenberg, A., Hamilton, J., Maltz, D.A., Patel, P. (2008), "The cost of a cloud: research problems in data center networks" in SIGCOMM Comput. Commun. Rev., Vol. 39, No. 1, pp. 68-73.
13. Grobauer, B., Walloschek, T., Stocker, E. (2011), "Understanding cloud computing vulnerabilities" in IEEE Security and Privacy, Vol. 9, No. 2, pp. 50-7.
14. IBM (2011), IBM Smart Cloud, available at: www.ibm.com/cloud-computing/us/en/ (accessed November 8, 2011).
15. Islam, S., Mouratidis, H., Jürjens, J. (2011), "A framework to support alignment of secure software engineering with legal regulations" in Journal of Software and Systems Modeling (SoSyM), Theme Section on Non-functional System Properties in Domain-Specific Modeling Languages (NFPinDSML), Vol. 10, No. 3, pp. 369-94.
16. Islam, S., Mouratidis, H., Weippl, E. (2012), A Goal-Driven Risk Management Approach to Support Security and Privacy Analysis of Cloud-Based System, Security Engineering for Cloud Computing: Approaches and Tools, IGI Publication, Hershey, PA.
17. Kaufman, L.M. (2009), "Data security in the world of cloud computing" in IEEE Security and Privacy, Vol. 7, No. 4, pp. 61-4.
18. Microsoft (2011), "Microsoft cloud", available at: www.microsoft.com/en us/cloud/default.aspx? fbid=K0xFa7eU XmQ (accessed May 8, 2012).
19. Morali, A., Wieringa, R. (2010), "Risk-based confidentiality requirements specification for outsourced it systems" in Proceedings of the 2010 18th IEEE International Requirements Engineering Conference, RE '10, IEEE Computer Society, Washington, DC, pp. 199-208.
20. Mouratidis, H., Kalloniatis, C., Islam, S., Philippe Huget, M., Gritzalis, S. (2012), "Aligning security and privacy to support the development of secure information systems, special issue security in information systems" in Journal of Universal Computer Science (JUCS), Vol. 18, No. 12, pp. 1608-27.
21. Nishchal, N., Mathur, P. (2010), "Cloud computing: new challenge to the entire computer industry" in Parallel Distributed and Grid Computing (PDGC), 2010 1st International Conference, pp. 223-8.
22. Oracle (2010), Oracle Cloud Computing White Paper, available at: www.oracle.com/us/technologies/cloud/oracle-cloud-computing-wp-076373.pdf (accessed October 14, 2012).
23. Peter, M., Grance, T. (2011), "The NIST definition of cloud computing (draft)", National Institute of Standards and Technology, Gaithersburg, MD, NIST Special Publication 800-145.
24. Proofpoint (2010), "Outbound email and data loss prevention in today's enterprise", Tech. Report.
25. Randell, B. (1969), "A note on storage fragmentation and program segmentation" in Communications of the ACM, Vol. 12, No. 4, pp. 365-9.
26. Rangan, P.V., Vin, H.M. (1993), "Efficient storage techniques for digital continuous multimedia" in IEEE Trans. Knowl. Data Eng., Vol. 5, No. 4, pp. 564-73.
27. Takabi, H., Joshi, J.B.D., Ahn, G.-J. (2010), "Security and privacy challenges in cloud computing environments" in IEEE Security and Privacy, Vol. 8, No. 6, pp. 24-31.
28. Umanath, N.S., Scamell, R.W. (2007), Data Modeling and Database Design, Course Technology Press, Boston, MA.
29. Vaquero, L.M., Rodero-Merino, L., Caceres, J., Lindner, M. (2008), "A break in the clouds: towards a cloud definition" in SIGCOMM Comput. Commun. Rev., Vol. 39, No. 1, pp. 50-5.
30. Widman, J. (2011), "10 massive security breaches", available at: www.informationweek.com/news/galleries/security/attacks/229300675 (accessed July 8, 2012).
31. Mell, P., Grance, T. (2009), "The NIST definition of cloud computing" in National Institute of Standards and Technology, Vol. 53, No. 6, p. 50.