Maintaining User Control While Storing and Processing Sensor Data in the Cloud

International Journal of Grid and High Performance Computing

Volumn 5, Issue 4, 2013, Pages 97-112

  Henze, Martin ^a   Hummen, René ^a   Matzutt, Roman ^a   Catrein, Daniel ^b   Wehrle, Klaus ^a  

^a RWTH AACHEN UNIVERSITY   (Germany)

^b QSC AG   (Germany)

Author keywords

Access Control; Architecture; Cloud; End to End Protection; Platform; Security; Sensor Network

Indexed keywords

EID: 85001608959     PISSN: 19380259     EISSN: 19380267     Source Type: Journal    
DOI: 10.4018/ijghpc.2013100107     Document Type: Article

References (34)

1. Akyildiz I., Su W., Sankarasubramaniam Y., Cayirci E. (2002). A survey on sensor networks. IEEE Communications Magazine, 40(8), 102–114. 10.1109/MCOM.2002.1024422
2. Amazon Web Services. (2013). Amazon EC2 instance types. Retrieved April 10, 2013, from http://aws.amazon.com/en/ec2/instance-types/
3. Barker, E., Barker, W., Burr, W., Polk, W., & Smid M. (2012). Recommendation for key management #– Part 1: General (Revision 3). National Institute of Standards and Technology, NIST Special Publication 800–57.
4. Becker E.,Buhse W.,G#ünnewig D.,Rump N.,(Eds.). (2003). Digital rights management. Springer. 10.1007/b12637
5. Boneh, D., & Waters, B. (2007). Conjunctive, subset, and range queries on encrypted data. In Proceedings 4th Theory of Cryptography Conference (TCC 2007).
6. Bugiel, S., N#ürnberger, S., Sadeghi, A.-R., & Schneider, T. (2011). Twin clouds: Secure cloud computing with low latency. In Proceedings 12th Joint IFIP TC6 and TC11 Conference Communications and Multimedia Security (CMS 2011).
7. Chow, R., Golle, P., Jakobsson, M., Shi, E., Staddon, J., Masuoka, R., & Molina, J. (2009). Controlling data in the cloud: Outsourcing computation without outsourcing control. In Proceedings of the 2009 ACM Workshop on Cloud Computing Security (CCSW 2009).
8. Coarfa C., Druschel P., Wallach D. S. (2006). Performance analysis of TLS web servers. [TOCS]. ACM Transactions on Computer Systems, 24(1), 39–69. 10.1145/1124153.1124155
9. Crockford D. (2006). The application/json media type for JavaScript object notation (JSON). Internet Engineering Taskforce RFC 4627. Informational.
10. Danezis, G., & Livshits, B. (2011). Towards ensuring client-side computational integrity. In Proceedings of the 3rd ACM Workshop on Cloud Computing Security (CCSW 2011).
11. Federal Office for Information Security. (2011). Protection profile for the gateway of a smart metering system. Germany, v01.01.01(final draft).
12. Galiegue, F., Zyp, K., & Court, G. (2013). JSON Schema: Core definitions and terminology. Internet Engineering Taskforce Internet-Draft draft-zyp-json-schema-04 (work in progess).
13. Gentry C. (2010). Computing arbitrary functions of encrypted data. Communications of the ACM, 53(3), 97–105. 10.1145/1666420.1666444
14. Geoffray, N., Thomas, G., Muller, G., Parrend, P., Fr#énot, S., & Folliot, B. (2009) I-JVM: A Java virtual machine for component isolation in OSGi. In Proceedings of the 2009 IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2009).
15. Hammer-Lahav E. (2010). The OAuth 1.0 protocol. Internet engineering taskforce RFC 5849. Informational.
16. Henze, M., Hummen, R., & Wehrle, K. (in press). The cloud needs cross-layer data handling annotations. In Proceedings of the 4th International Workshop on Data Usage Management (DUMA 2013).
17. Hummen, R., Henze, M., Catrein, D., & Wehrle, K. (2012). A cloud design for user-controlled storage and processing of sensor data. In Proceedings of the 4th IEEE International Conference on Cloud Computing Technology and Science (CloudCom 2012).
18. Itani, W., Kayssi, A., & Chehab, A. (2009). Privacy as a service: Privacy-aware data storage and processing in cloud computing architectures. In Proceedings 8th IEEE International Symposium on Dependable, Autonomic and Secure Computing (DASC 2009).
19. Jones, M., Rescorla, E., & Hildebrand, J. (2012). JSON web encryption (JWE). Internet engineering taskforce internet-draft draft-ietf-jose-json-web-encryption-08 (work in progess).
20. Kamara, S., & Lauter, K. (2010). Cryptographic cloud storage. In Proceedings Workshop on Real-Life Cryptographic Protocols and Standardization (RLCPS 2010).
21. Kissner, L., & Song, D. (2005). Privacy-preserving set operations. In Proceedings 25th Annual International Cryptology Conference (CRYPTO 2005).
22. Lombardi F., Di Pietro R. (2011). Secure virtualization for cloud computing. Journal of Network and Computer Applications, 34(4), 1113–1122. 10.1016/j.jnca.2010.06.008
23. Martignoni, L., Poosankam, P., Zaharia, M., Han, J., McCamant, S., & Song, D., Stoica, I. (2012). Cloud terminal: Secure access to sensitive applications from untrusted systems. In Proceedings of the 2012 USENIX Annual Technical Conference (ATC 2012).
24. Parrend P., Frenot S. (2009). Security benchmarks of OSGi platforms: Toward hardened OSGi. Software, Practice & Experience, 39(5), 471–499. 10.1002/spe.906
25. Pearson, S., & Benameur, A. (2010). Privacy, security and trust issues arising from cloud computing. In Proceedings of the Second IEEE International Conference on Cloud Computing Technology and Science (CloudCom 2010).
26. Pearson, S., Mont, M., Chen, L., & Reed, A. (2011). End-to-end policy-based encryption and management of data in the cloud. In Proceedings of the Third IEEE International Conference on Cloud Computing Technology and Science (CloudCom 2011).
27. Popa, R. A., Redfield, C. M. S., Zeldovich, N., & Balakrishnan, H. (2011). CryptDB: Protecting confidentiality with encrypted query processing. In Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles (SOSP 2011).
28. Ristenpart, T., Tromer, E., Shacham, H., & Savage, S. (2009) Hey, you, get off of my cloud: Exploring information leakage in third-party compute clouds. In Proceedings of the 16th ACM Conference on Computer and Communications Security (CCS 2009).
29. Santos, N., Gummadi, K. P., & Rodrigues, R. (2009). Towards trusted cloud computing. In Proceedings USENIX Workshop on Hot Topics in Cloud Computing (HotCloud 2009).
30. Sehr, D., Muth, R., Biffle, C., Khimenko, V., Pasko, E., & Schimpf, K., Chen, B. (2010). Adapting software fault isolation to contemporary CPU architectures. In Proceedings of the 19th USENIX Conference on Security (Security 2010).
31. van Dijk, M., & Juels, A. (2010). On the impossibility of cryptography alone for privacy-preserving cloud computing. In Proceedings 5th USENIX Workshop on Hot Topics in Security (HotSec 2010).
32. Wallom, D., Turilli, M., Taylor, G., Hargreaves, N., Martin, A., Raun, A., & McMoran, A. (2011) myTrustedCloud: Trusted cloud infrastructure for security-critical computation and data management. In Proceedings of the Third IEEE International Conference on Cloud Computing Technology and Science (CloudCom 2011).
33. Wang Q., Wang C., Ren K., Lou W., Li J. (2011). Enabling public auditability and data dynamics for storage security in cloud computing. IEEE Transactions on Parallel and Distributed Systems, 22(5), 847–859. 10.1109/TPDS.2010.183
34. Zhang, Y., Juels, A., Reiter, M. K., & Ristenpart, T. (2012). Cross-VM side channels and their use to extract private keys. In Proceedings of the 2012 ACM Conference on Computer and Communications Security (CCS 2012).