Domain based storage protection with secure access control for the cloud

Nicolae Paladi; Antonis Michalas; Christian Gehrmann

doi:10.1145/2600075.2600082

Domain based storage protection with secure access control for the cloud

Nicolae Paladi, Antonis Michalas, Christian Gehrmann

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Scientific › peer-review

27 Citations (Scopus)

Abstract

Cloud computing has evolved from a promising concept to one of the fastest growing segments of the IT industry. However, many businesses and individuals continue to view cloud computing as a technology that risks exposing their data to unauthorized users. We introduce a data confidentiality and integrity protection mechanism for Infrastructure-as-a-Service (IaaS) clouds, which relies on trusted computing principles to provide transparent storage isolation between IaaS clients. We also address the absence of reliable data sharing mechanisms, by providing an XML-based language framework which enables clients of IaaS clouds to securely share data and clearly define access rights granted to peers. The proposed improvements have been prototyped as a code extension for a popular cloud platform.

Original language	English
Title of host publication	SCC 2014 - Proceedings of the 2nd International Workshop on Security in Cloud Computing
Publisher	ACM
Pages	35-42
Number of pages	8
ISBN (Print)	9781450328050
DOIs	https://doi.org/10.1145/2600075.2600082
Publication status	Published - 1 Jan 2014
Externally published	Yes
Publication type	A4 Article in conference proceedings
Event	2nd International Workshop on Security in Cloud Computing, SCC 2014 - Kyoto, Japan Duration: 3 Jun 2014 → 3 Jun 2014

Conference

Conference	2nd International Workshop on Security in Cloud Computing, SCC 2014
Country/Territory	Japan
City	Kyoto
Period	3/06/14 → 3/06/14

Keywords

cloud computing
IaaS
security
storage protection

ASJC Scopus subject areas

Software

Access to Document

10.1145/2600075.2600082

Cite this

@inproceedings{af084adfd5044bf7974e062a5f660ece,

title = "Domain based storage protection with secure access control for the cloud",

abstract = "Cloud computing has evolved from a promising concept to one of the fastest growing segments of the IT industry. However, many businesses and individuals continue to view cloud computing as a technology that risks exposing their data to unauthorized users. We introduce a data confidentiality and integrity protection mechanism for Infrastructure-as-a-Service (IaaS) clouds, which relies on trusted computing principles to provide transparent storage isolation between IaaS clients. We also address the absence of reliable data sharing mechanisms, by providing an XML-based language framework which enables clients of IaaS clouds to securely share data and clearly define access rights granted to peers. The proposed improvements have been prototyped as a code extension for a popular cloud platform.",

keywords = "cloud computing, IaaS, security, storage protection",

author = "Nicolae Paladi and Antonis Michalas and Christian Gehrmann",

year = "2014",

month = jan,

day = "1",

doi = "10.1145/2600075.2600082",

language = "English",

isbn = "9781450328050",

pages = "35--42",

booktitle = "SCC 2014 - Proceedings of the 2nd International Workshop on Security in Cloud Computing",

publisher = "ACM",

address = "United States",

note = "2nd International Workshop on Security in Cloud Computing, SCC 2014 ; Conference date: 03-06-2014 Through 03-06-2014",

}

TY - GEN

T1 - Domain based storage protection with secure access control for the cloud

AU - Paladi, Nicolae

AU - Michalas, Antonis

AU - Gehrmann, Christian

PY - 2014/1/1

Y1 - 2014/1/1

N2 - Cloud computing has evolved from a promising concept to one of the fastest growing segments of the IT industry. However, many businesses and individuals continue to view cloud computing as a technology that risks exposing their data to unauthorized users. We introduce a data confidentiality and integrity protection mechanism for Infrastructure-as-a-Service (IaaS) clouds, which relies on trusted computing principles to provide transparent storage isolation between IaaS clients. We also address the absence of reliable data sharing mechanisms, by providing an XML-based language framework which enables clients of IaaS clouds to securely share data and clearly define access rights granted to peers. The proposed improvements have been prototyped as a code extension for a popular cloud platform.

AB - Cloud computing has evolved from a promising concept to one of the fastest growing segments of the IT industry. However, many businesses and individuals continue to view cloud computing as a technology that risks exposing their data to unauthorized users. We introduce a data confidentiality and integrity protection mechanism for Infrastructure-as-a-Service (IaaS) clouds, which relies on trusted computing principles to provide transparent storage isolation between IaaS clients. We also address the absence of reliable data sharing mechanisms, by providing an XML-based language framework which enables clients of IaaS clouds to securely share data and clearly define access rights granted to peers. The proposed improvements have been prototyped as a code extension for a popular cloud platform.

KW - cloud computing

KW - IaaS

KW - security

KW - storage protection

U2 - 10.1145/2600075.2600082

DO - 10.1145/2600075.2600082

M3 - Conference contribution

AN - SCOPUS:84902766965

SN - 9781450328050

SP - 35

EP - 42

BT - SCC 2014 - Proceedings of the 2nd International Workshop on Security in Cloud Computing

PB - ACM

T2 - 2nd International Workshop on Security in Cloud Computing, SCC 2014

Y2 - 3 June 2014 through 3 June 2014

ER -

Domain based storage protection with secure access control for the cloud

Abstract

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Fingerprint

Cite this