SafeProtect: Controlled Data Sharing with User-Defined Policies in Cloud-Based Collaborative Environment

IEEE Transactions on Emerging Topics in Computing

Volumn 4, Issue 2, 2016, Pages 301-315

  Thilakanathan, Danan ^a,b   Chen, Shiping ^b   Nepal, Surya ^b   Calvo, Rafael ^a  

^a UNIVERSITY OF SYDNEY   (Australia)

^b CSIRO   (Australia)

Author keywords

Access control; Cloud; Distributed computer networks; monitoring; Policy; Privacy; Security

Indexed keywords

ACCESS CONTROL; CLOUDS; COMPUTER PRIVACY; DATA PRIVACY; MONITORING; PUBLIC POLICY;

CLOUD BASED COLLABORATIVE; CLOUD-BASED APPLICATIONS; DATA SHARING; DISTRIBUTED COMPUTER NETWORKS; SECURE DATA; SECURITY; USER-DEFINED POLICIES;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 84976521386     PISSN: None     EISSN: 21686750     Source Type: Journal    
DOI: 10.1109/TETC.2015.2502429     Document Type: Article

References (40)

1. D. Thilakanathan, S. Chen, S. Nepal, and R. A. Calvo, "Secure data sharing in the cloud, " in Security, Privacy, and Trust in Cloud Systems. Berlin, Germany: Springer-Verlag, 2013, pp. 45-72.
2. A. Gellin. (2012). Facebook's Bene-Ts Make It Worthwhile. [Online]. Available: http://www.highbeam.com/doc/1P2-30776177.html, accessed May 7, 2013.
3. G. Benedis-Grab, "Sharing digital data, " Sci. Children, vol. 48, no. 8, pp. 42-46, 2011.
4. T. Jones and K. Cuthrell, "YouTube: Educational potentials and pitfalls, " Comput. Schools, vol. 28, no. 1, pp. 75-85, 2011.
5. S. E. Fienberg and M. E. Martin, Sharing Research Data.Washington, DC, USA: National Academies Press, 1985.
6. D. A. Riley, "Using Google wave and docs for group collaboration, " Library Hi Tech News, vol. 27, nos. 4-5, pp. 12-14, 2010.
7. E. R. Weitzman, L. Kaci, and K. D. Mandl, "Sharing medical data for health research: The early personal health record experience, " J. Med. Internet Res., vol. 12, no. 2, p. e14, 2010.
8. J. Simons, "Between iPhone and YouTube: Movies on the move, " in Proc. FGw, Amsterdam School Cultural Anal. (ASCA), 2011, pp. 95-107.
9. S. Pearson and A. Benameur, "Privacy, security and trust issues arising from cloud computing, " in Proc. IEEE 2nd Int. Conf. Cloud Comput. Technol. Sci. (CloudCom), Nov./Dec. 2010, pp. 693-702.
10. H. Takabi, J. B. D. Joshi, and G.-J. Ahn, "Security and privacy challenges in cloud computing environments, " IEEE Security Privacy, vol. 8, no. 6, pp. 24-31, Nov./Dec. 2010.
11. A. Cavoukian, "Privacy in the clouds, " Identity Inf. Soc., vol. 1, no. 1, pp. 89-108, 2008.
12. F. Sabahi, "Cloud computing security threats and responses, " in Proc. IEEE 3rd Int. Conf. Commun. Softw. Netw., May 2011, pp. 245-249.
13. J. Yao, S. Chen, S. Nepal, D. Levy, and J. Zic, "TrustStore: Making Amazon S3 trustworthy with services composition, " in Proc. 10th IEEE/ACM Int. Conf. Cluster, Cloud Grid Comput., May 2010, pp. 600-605.
14. K. W. Miller, J. Voas, and G. F. Hurlburt, "BYOD: Security and privacy considerations, " IT Prof., vol. 14, no. 5, pp. 53-55, 2012.
15. G. Thomson, "BYOD: Enabling the chaos, " Netw. Secur., vol. 2012, no. 2, pp. 5-8, 2012. [Online]. Available: http://dx.doi.org/10.1016/S1353-4858(12)70013-2
16. R. Huang, X. Gui, S. Yu, andW. Zhuang, "Research on privacy-preserving cloud storage framework supporting ciphertext retrieval, " in Proc. Int. Conf. Netw. Comput. Inf. Secur., 2011, pp. 93-97.
17. D. Bender, "Privacy and security issues in cloud computing, " in Proc. Comput. Internet Lawyer, 2012, pp. 1-15.
18. S. Shin, K. Kobara, and H. Imai, "A secure public cloud storage sys-Tem, " in Proc. Int. Conf. Internet Technol. Secured Trans. (ICITST), 2011, pp. 103-109.
19. M. Zhou, R. Zhang, W. Xie, W. Qian, and A. Zhou, "Security and privacy in cloud computing: A survey, " in Proc. 6th Int. Conf. Semantics Knowl. Grid (SKG), 2010, pp. 105-112.
20. P. Andy. (2007). Salesforce.com Scrambles to Halt Phishing Attacks. [Online]. Available: http://www.internetnews.com/ent-news/article. php/3709836, accessed Oct. 2012.
21. A. Charles. (2011). PlayStation network: Hackers claim to have 2.2m credit cards. The Guardian Technology Blog. [Online]. Available: http://www.guardian.co.uk/technology/blog/2011/apr/29/playstation-network-hackers-credit-cards, accessed Oct. 2012.
22. L. Whitney. (2011). Feds investigate alleged attacks on Gmail accounts. CNet News. [Online]. Available: http://news.cnet.com/8301-1009-3-20068229-83/feds-investigate-Alleged-Attacks-on-gmail-Accounts, accessed Oct. 2012.
23. S. Nepal, J. Zic, D. Liu, and J. Jang, "A mobile and portable trusted computing platform, " EURASIP J. Wireless Commun. Netw., vol. 2011, p. 75, Aug. 2011.
24. J. Zic and S. Nepal, "Implementing a portable trusted environment, " in Proc. Future Trust Comput. Conf., 2008, pp. 17-29.
25. S. Nepal, J. Zic, H. Hwang, and D. Moreland, "Trust extension device: Providing mobility and portability of trust in cooperative information systems, " in On the Move to Meaningful Internet Systems 2007: CoopIS, DOA, ODBASE, GADA, and IS (Lecture Notes in Computer Science), vol. 4803. Berlin, Germany: Springer-Verlag, 2007, pp. 253-271
26. T. El Gamal, "A public key cryptosystem and a signature scheme based on discrete logarithms, " in Proc. Adv. Cryptol., 1985, pp. 10-18.
27. Y.Yang, J. K. Liu, K. Liang, K.-K. R. Choo, and J. Zhou, "Extended proxy-Assisted approach: Achieving revocable-ne-grained encryption of cloud data, " in Proc. 20th Eur. Symp. Res. Comput. Secur. (ESORICS), Vienna, Austria, 2015, pp. 146-166.
28. A. C. Squicciarini, G. Petracca, and E. Bertino, "Adaptive data protec-Tion in distributed systems, " in Proc. 3rd ACM Conf. Data Appl. Secur. Privacy (CODASPY), Feb. 2013, pp. 365-376.
29. Y.-Y. Chen, P. A. Jamkhedkar, and R. B. Lee, "A software-hardware architecture for self-protecting data, " in Proc. 19th ACM Conf. Comput. Commun. Secur., Oct. 2012, pp. 14-27.
30. J. Bethencourt, A. Sahai, and B.Waters, "Ciphertext-policy attribute-based encryption, " in Proc. IEEE Symp. Secur. Privacy, May 2007, pp. 321-334.
31. A.V. D. M. Kayem, "On monitoring information fiowof outsourced data, " in Proc. Inf. Secur. South Africa (ISSA), 2010, pp. 1-8.
32. M. S. Kirkpatrick and S. Kerr, "Enforcing physically restricted access control for remote data, " in Proc. 1st ACM Conf. Data Appl. Secur. Privacy (CODASPY), 2011, pp. 203-212.
33. D. Thilakanathan, S. Chen, S. Nepal, R. A. Calvo, and L. Alem, "A platform for secure monitoring and sharing of generic health data in the cloud, " Future Generat. Comput. Syst., vol. 35, pp. 102-113, Jun. 2014.
34. D. Thilakanathan, S. Chen, S. Nepal, and R. A. Calvo, "Secure and controlled sharing of data in distributed computing, " in Proc. IEEE 16th Int. Conf. Comput. Sci. Eng., Dec. 2013, pp. 825-832.
35. V. Goyal, O. Pandey, A. Sahai, and B.Waters, "Attribute-based encryption for-ne-grained access control of encrypted data, " in Proc. 13th ACMConf. Comput. Commun. Secur. (CCS), 2006, pp. 89-98.
36. A. Boldyreva, V. Goyal, and V. Kumar, "Identity-based encryption with ef-cient revocation, " in Proc. 15th ACM Conf. Comput. Commun. Secur. (CCS), 2008, pp. 417-426.
37. A. Sahai and H. Seyalioglu, "Worry-free encryption: Functional encryp-Tion with public keys, " in Proc. 17th ACM Conf. Comput. Commun. Secur. (CCS), 2010, pp. 463-472.
38. D. Thilakanathan, S. Chen, S. Nepal, D. Liu, R. A. Calvo, and J. Zic, "Secure multiparty data sharing in the cloud using hardware-based TPM devices, " in Proc. IEEE 7th CLOUD, Jun./Jul. 2014, pp. 224-231.
39. S. Chen, D. Thilakanathan, D. Xu, S. Nepal, and R. A. Calvo, "Self protecting data sharing using generic policies, " in Proc. 15th IEEE/ACM Int. Symp. Cluster, Cloud Grid Comput. (CCGrid), May 2015, pp. 1197-1200.
40. L. Wei, H. Zhu, Z. Cao, W. Jia, Y. Chen, and A. V. Vasilakos, "Security and privacy for storage and computation in cloud computing, " Inf. Sci., vol. 258, pp. 371-386, Feb. 2014.