End-to-end privacy policy enforcement in cloud infrastructure

Proceedings of the 2013 IEEE 2nd International Conference on Cloud Networking, CloudNet 2013

Volumn , Issue , 2013, Pages 25-32

  Betgé Brezetz, Stéphane ^a   Kamga, Guy Bertrand ^a   Dupont, Marie Pascale ^a   Guesmi, Aoues ^a  

^a LUCENT TECHNOLOGIES   (United States)

Author keywords

Cloud computing; data protection; FUSE; privacy control; sticky policy

Indexed keywords

CLOUD INFRASTRUCTURES; CLOUD TECHNOLOGIES; COMPUTATION COSTS; DATA PROTECTION; PRIVACY CONSTRAINTS; PRIVACY CONTROL; STICKY POLICIES; TRANSFER CONTROL;

ACCESS CONTROL; CLOUD COMPUTING; DATA PROCESSING; ELECTRIC FUSES;

DATA PRIVACY;

EID: 84893816738     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CloudNet.2013.6710554     Document Type: Conference Paper

References (34)

1. D. Song, E. Shi, I. Fischer and U. Shankar, "Cloud data protection for the masses", IEEE Computer Magazine, Vol. 45, Issue. 1, 2012.
2. M. Ghorbel, A. Aghasaryan, S. Betgé-Brezetz, M.P. Dupont, G.B. Kamga, S. Piekarec, "Privacy data envelope: concept and implementation", Ninth Annual Conference on Privacy, Security and Trust, PST 2011, 19-21 July 2011.
3. M.O. Rabin, "Efficient dispersal of information for security, load balancing and fault tolerance", Journal of the ACM, Vol. 36, Issue 2, 1989.
4. W. Jansen and T. Grance, "Guidelines on security and privacy in public cloud computing", NIST, 2011.
5. F.Y. Rashid, "Epsilon data breach highlights cloud computing security concerns", eWeek.com, 2011.
6. C. Gentry, "Fully homomorphic encryption using ideal lattices", Proc. 41st ACM Symposium on Theory of Computing, 2009.
7. Article 29 Data Protection Working Party, "Opinion 05/2012 on cloud computing", WP 196, Brussels, July 2012.
8. Heka FS, formerly known as CloudFS, http://hekafs.org.
9. D. Desai, "Beyond location: data security in the 21st Century", Communications of the ACM; Vol. 56, No. 1, Jan. 2013.
10. S. Pearson and G. Yee (Eds.), "Privacy and security for cloud computing", Springer, 2013.
11. H. Takabi, J.B.D. Joshi, and G.J. Ahn, "Security and privacy challenges in cloud computing environments", IEEE Security & Privacy, Vol.8, No.6, Nov.-Dec. 2010.
12. Y. Brun and N. Medvidovic, "Keeping data private while computing in the cloud", IEEE International Conference on Cloud Computing, CLOUD 2012, 24-29 June 2012.
13. M.H. Diallo, B. Hore, E.C. Chang, S. Mehrotra, and N. Venkatasubramanian, "CloudProtect: managing data Privacy in cloud applications" IEEE Conference on Cloud Computing, CLOUD 2012, 24-29 June 2012.
14. Sophos, http://www.sophos.com.
15. S. Yu, C. Wang, K. Ren, W. Lou, "Achieving secure, scalable, and fine-grained data access control in cloud computing", IEEE INFOCOM 2010, 14-19 March 2010.
16. M. Singhal, S. Chandrasekhar, T. Ge, R. Sandhu, K. Ram, G.J. Ahn, E. Bertino, "Collaboration in multicloud computing environments: framework and security issues", Computer, vol. 46, no. 2, Feb. 2013.
17. S. Trabelsi and J. Sendor, "Sticky policies for data control in the cloud", Tenth Annual International Conference on Privacy, Security and Trust, PST 2012, 16-18 July 2012.
18. I. Papagiannis and P. Pietzuch, "CloudFilter: practical control of sensitive data propagation to the cloud", ACM Workshop on Cloud computing security workshop, CCSW '12, Oct. 19 2012.
19. D.W. Chadwick and K. Fatema, "A privacy preserving authorisation system for the cloud", J. Comput. Syst. Sci., vol. 78, no. 5, Sept. 2012.
20. M. Casassa Mont, V. Sharma, and S. Pearson, "EnCoRe: dynamic consent, policy enforcement and accountable information sharing within and across organisations", HP report HPL-2012-36, 2012.
21. T. Samson, "Apple iCloud breach proves Wozniak's point about cloud risks", InfoWorld, August 2012.
22. Cloud Security Alliance (CSA), "The notorious nine cloud computing top threats in 2013", February 2013.
23. R. George., "Tools and strategies for file-level data protection", InformationWeek Report, April 2013.
24. P. Hall, "Opportunities for CSPs in enterprise-grade public cloud computing", OVUM, May 2012.
25. Right Management System, http://technet.microsoft.com/enus/windowsserver/ dd448611.aspx.
26. S. Betgé-Brezetz, G.B. Kamga, M. Ghorbel, M.P. Dupont, "Privacy control in the cloud based on multilevel policy enforcement", IEEE Conference on Cloud Networking, CLOUDNET 2012, 28-30 Nov. 2012.
27. Cloud Security Alliance (CSA), "Security guidance for critical areas of cloud computing", Version 3.0, November 2011.
28. Cloud Industry Forum, "UK Cloud adoption and trends for 2013", 2012.
29. S. Betgé-Brezetz et al., "Seeding the Cloud: An Innovative Approach to Grow Trust in Cloud Based Infrastructures" FIA book, Lecture Notes in Computer Science, Vol. 7858, 2013.
30. GPG, http://www.gnupg.org.
31. BlowFish, https://www.schneier.com/blowfish.html.
32. Sun XACML, http://sunxacml.sourceforge.net.
33. FUSE: Filesystem in Userspace, http://fuse.sourceforge.net.
34. FUSE-J, http://sourceforge.net/projects/fuse-j.