Risk Aware Approach to Data Confidentiality in Cloud Computing

Опубликовано 22 июня 2016, 3:15

This talk focuses on the the issue of "loss of control" that results when users outsource data and computation to the clouds. While loss of control has multiple manifestations, we focus on the data privacy and confidentiality implications when cloud providers are untrusted. Instead of following the well studied (but still unsolved) path of encrypting data when outsourcing and computing on the encrypted domain, the talk advocates a risk-based approach to partitioning computation over hybrid clouds that provides an abstraction to address secure cloud data processing in a variety of system and application contexts. The talk will focus on two systems (a) SEMROD – a secure map reduce platform for secure computing in hybrid clouds, and (b) CloudProtect – a middleware to selectively encrypt data stored in applications over the cloud based on user's security policies and workload.