Evidence-based security configurations for cloud datastores

Proceedings of the ACM Symposium on Applied Computing

Volumn Part F128005, Issue , 2017, Pages 424-430

  Pallas, Frank ^a   Bermbach, David ^a   Müller, Steffen ^a   Tai, Stefan ^a  

^a TECHNISCHE UNIVERSITÄT BERLIN   (Germany)

Author keywords

Cloud storage; Data in transit security; Performance benchmarking; Security configurations; Trade offs

Indexed keywords

COST ENGINEERING; CRYPTOGRAPHY; DIGITAL STORAGE; ECONOMIC AND SOCIAL EFFECTS;

CLOUD STORAGES; DATA IN TRANSIT SECURITY; PERFORMANCE BENCHMARKING; SECURITY CONFIGURATIONS; TRADE OFF;

BENCHMARKING;

EID: 85020847809     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/3019612.3019654     Document Type: Conference Paper

References (26)

1. D. Abadi. Consistency tradeoffs in modern distributed database system design: CAP is only part of the story. IEEE Computer, 45(2):37-42, 2012.
2. R. Anderson and T. Moore. The economics of information security. Science, 314(5799):610-613, 2006.
3. Apache Software Foundation. Apache HBase reference guide, 2016. https://hbase.apache.org/book.html#security.example.config.
4. A. Beautement, S. Parkin, I. Becker, K. Krol, and A. Sasse. Productive security: A scalable methodology for analysing employee security behaviours. In 12th Symposium on Usable Privacy and Security (SOUPS), 2016.
5. A. Beautement, M. A. Sasse, and M. Wonham. The compliance budget: Managing security behaviour in organisations. In Proceedings of the workshop on ew security paradigms (NSPW), pages 47-58. ACM, 2009.
6. D. Bermbach. Benchmarking Eventually Consistent Distributed Storage Systems. PhD thesis, Karlsruhe Institute of Technology, 2014.
7. D. Bermbach, J. Kuhlenkamp, B. Derre, M. Klems, and S. Tai. A middleware guaranteeing client-centric consistency on top of eventually consistent datastores. In Proceedings of the 1st International Conference on Cloud Engineering (IC2E), pages 114-123. IEEE, 2013.
8. D. Bermbach and S. Tai. Eventual consistency: How soon is eventual? An evaluation of amazon s3's consistency behavior. In Proceedings of the 6th Workshop on Middleware for Service Oriented Computing (MW4SOC), MW4SOC '11, pages 1:1-1:6. ACM, 2011.
9. D. Bermbach and S. Tai. Benchmarking eventual consistency: Lessons learned from long-term experimental studies. In Proceedings of the 2nd International Conference on Cloud Engineering (IC2E), pages 47-56. IEEE, 2014.
10. D. Bermbach and E. Wittern. Benchmarking web api quality. In Proceedings of the 16th International Conference on Web Engineering (ICWE), pages 188-206. Springer, 2016.
11. D. Bermbach, E. Wittern, and S. Tai. Cloud Service Benchmarking. Springer, 2017.
12. D. Bermbach, L. Zhao, and S. Sakr. Towards comprehensive measurement of consistency guarantees for cloud-hosted data storage services. In R. Nambiar and M. Poess, editors, Performance Characterization and Benchmarking, volume 8391 of Lecture Notes in Computer Science, pages 32-47. Springer, 2014.
13. F. Bjorck. Institutional theory: A new perspective for research into is/it security in organisations. In Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS), 2004.
14. R. Böhme. Security metrics and security investment models. In International Workshop on Security (IWSEC), pages 10-24. Springer, 2010.
15. H. Cavusoglu, S. Raghunathan, and H. Cavusoglu. Configuration of and interaction between information security technologies: The case of firewalls and intrusion detection systems. Information Systems Research, 20(2):198-217, 2009.
16. F. Chang, J. Dean, S. Ghemawat, W. C. Hsieh, D. A. Wallach, M. Burrows, T. Chandra, A. Fikes, and R. E. Gruber. Bigtable: A distributed storage system for structured data. In Proceedings of the 7th Symposium on Operating Systems Design and Implementation (OSDI), OSDI '06, pages 205-218, Berkeley, CA, USA, 2006. USENIX Association.
17. B. F. Cooper, A. Silberstein, E. Tam, R. Ramakrishnan, and R. Sears. Benchmarking cloud serving systems with YCSB. In Proceedings of the 1st Symposium on Cloud Computing (SOCC), pages 143-154. ACM, 2010.
18. G. DeCandia, D. Hastorun, M. Jampani, G. Kakulapati, A. Lakshman, A. Pilchin, S. Sivasubramanian, P. Vosshall, and W. Vogels. Dynamo: Amazon's highly available key-value store. In Proceedings of 21st Symposium on Operating Systems Principles (SOSP), pages 205-220. ACM, 2007.
19. S. Ghemawat, H. Gobioff, and S.-T. Leung. The google file system. In Proceedings of the 19th Symposium on Operating Systems Principles (SOSP), SOSP '03, pages 29-43, New York, NY, USA, 2003. ACM.
20. C. Ioannidis, D. Pym, and J. Williams. Information security trade-offs and optimal patching policies. European Journal of Operational Research, 216(2):434-444, 2012.
21. A. Lakshman and P. Malik. Cassandra: A decentralized structured storage system. SIGOPS Operating Systems Review, 44(2):35-40, 2010.
22. S. Müller, D. Bermbach, S. Tai, and F. Pallas. Benchmarking the performance impact of transport layer security in cloud database systems. In Proceedings of the 2nd International Conference on Cloud Engineering (IC2E), pages 27-36. IEEE, 2014.
23. F. Pallas, J. Günther, and D. Bermbach. Pick your choice in HBase: Security or performance. In Proceedings of the 2016 IEEE International Conference on Big Data (BigData 2016). IEEE, 2016.
24. B. Spivey and J. Echeverria. Hadoop Security-Protecting Your Big Data Platform. O'Reilly, 2015.
25. W. Vogels. Eventually consistent. ACM Queue, 6(6):14-19, Oct. 2008.
26. WEIS. Workshop on the economics of information security. http://econinfosec.org/.