Structural cloud audits that protect private information

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2013, Pages 101-111

  Xiao, Hongda ^a   Ford, Bryan ^a   Feigenbaum, Joan ^a  

^a YALE UNIVERSITY   (United States)

Author keywords

cloud auditing; secure multi party computation

Indexed keywords

CLOUD STRUCTURE; CRITICAL TASKS; DATA PARTITIONING; PRIVACY PRESERVING; PRIVATE INFORMATION; PROTOTYPE IMPLEMENTATIONS; RELIABILITY GUARANTEE; SECURE MULTI-PARTY COMPUTATION;

CLOUD COMPUTING; CRITICAL CURRENT DENSITY (SUPERCONDUCTIVITY); MANAGEMENT; OUTAGES;

REDUNDANCY;

EID: 84889073577     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2517488.2517493     Document Type: Conference Paper

References (28)

1. Amazon web services global infrastructure. http://aws.amazon.com/en/ about-aws/globalinfrastructure/.
2. NetworkX. http://networkx.github.com/.
3. Windows azure. http://en.wikipedia.org/wiki/Windows-Azure.
4. A. Ben-David, N. Nisan, and B. Pinkas. FairplayMP: a system for secure multi-party computation. In ACM Symposium on Computer and Communication Security, pages 257-266, 2008.
5. S. Bleikertz, M. Schunter, C. W. Probst, D. Pendarakis, and K. Eriksson. Security audits of multi-tier virtual infrastructures in public infrastructure clouds. In ACM Cloud Computing Security Workshop, pages 93-102, 2010.
6. D. Bogdanov and A. Kalu. Pushing back the rain - how to create trustworthy services in the cloud. ISACA Journal, 3:49-51, 2013. Available at http://www.isaca.org/Journal/Past-Issues/2013/Volume-3/Pages/default.aspx.
7. M. Burkhart, M. Strasser, D. Many, and X. Dimitropoulos. SEPIA: Privacy-preserving aggregation of multi-domain network events and statistics. In USENIX Security Symposium, 2010.
8. B. Butler. Cloud storage viable option, but proceed carefully, 2013. Available at http://www.networkworld.com/news/2013/010313-gartner-storage- 265460.html.
9. B. Butler. Top 10 cloud storage providers, 2013. Available at http://www.networkworld.com/news/2013/010313-gartner-cloud-storage-265459.html.
10. I. Damgård, M. Geisler, M. Krøigård, and J. Nielsen. Asynchronous multiparty computation: Theory and implementation. In S. Jarecki and G. Tsudik, editors, Public Key Cryptography - PKC 2009, pages 160-179. Springer Verlag, LNCS 5443, 2009.
11. C. A. Ericson II. Hazard analysis techniques for system safety. John Wiley and Sons, 2000.
12. D. Gupta, A. Segal, A. Panda, G. Segev, M. Schapira, J. Feigenbaum, J. Rexford, and S. Shenker. A New Approach to Interdomain Routing Based on Secure Multi-Party Computation. In ACM SIGCOMM Workshop on Hot Topics in Networks, 2012.
13. W. Henecka, S. Kögl, A.-R. Sadeghi, T. Schneider, and I. Wehrenberg. Tasty: tool for automating secure two-party computations. In ACM Conference on Computer and Communications Security, pages 451-462, 2010.
14. D. Malkhi, N. Nisan, B. Pinkas, and Y. Sella. Fairplay - a secure two-party computation system. In USENIX Security Symposium, pages 298-302, 2004.
15. R. N. Mysore, A. Pamboris, N. Farrington, N. Huang, P. Miri, S. Radhakrishnan, V. Subramanya, and A. Vahdat. PortLand: A Scalable Fault-tolerant Layer 2 Data Center Network Fabric. In ACM SIGCOMM, pages 39-50, 2009.
16. W. Oremus. Internet outages highlight problem for cloud computing: Actual clouds, 2012. Available at http://www.slate.com/blogs/future-tense/2012/07/02/ amazon-ec2-outage-netflix-pinterest-instagram-down-after-aws-cloud-loses-power. html.
17. M. A. Shah, M. Baker, J. C. Mogul, and R. Swaminathan. Auditing to keep online storage services honest. In USENIX Workshop on Hot Topics in Operating Systems, 2007.
18. M. A. Shah, R. Swaminathan, and M. Baker. Privacy-preserving audit and extraction of digital contents. Cryptology ePrint Archive, Report 2008/186, 2008. Available at http://eprint.iacr.org/2008/186/.
19. W. E. Vesely, F. F. Goldberg, N. H. Roberts, and D. F. Haasl. Fault Tree Handbook. US Nuclear Regulatory Commission, 1981.
20. C. Wang, S. S. M. Chow, Q. Wang, K. Ren, and W. Lou. Privacy-preserving public auditing for secure cloud storage. IEEE Transactions on Computers, 62(2):362-375, 2013.
21. C. Wang, K. Ren, W. Lou, and J. Li. Toward publicly auditable secure cloud data storage services. IEEE Network, 24(4):19-24, 2010.
22. C. Wang, Q. Wang, K. Ren, and W. Lou. Privacy-preserving public auditing for data storage security in cloud computing. In IEEE INFOCOM, pages 525-533, 2010.
23. Q. Wang, C. Wang, K. Ren, W. Lou, and J. Li. Enabling public auditability and data dynamics for storage security in cloud computing. IEEE Transactions on Parallel and Distributed Systems, 22(5):847-859, 2011.
24. K. Yang and X. Jia. Data storage auditing service in cloud computing: challenges, methods and opportunities. World Wide Web, 15(4):409-428, 2012.
25. A. C. Yao. Protocols for secure computation. In IEEE Symposium on Foundations of Computer Science, pages 160-164, 1982.
26. A. C. Yao. How to generate and exchange secrets. In IEEE Symposium on Foundations of Computer Science, pages 162-167, 1986.
27. E. Zhai, R. Chen, D. I. Wolinsky, and B. Ford. An untold story of redundant clouds: Making your service deployment truly reliable. In ACM Workshop on Hot Topics in Dependable Systems, 2013.
28. E. Zhai, D. I. Wolinsky, H. Xiao, H. Liu, X. Su, and B. Ford. Auditing the structural reliability of the clouds. Technical Report YALEU/DCS/TR-1479, July 2013. Available at http://www.cs.yale.edu/publications/techreports/tr1479. pdf.