ANALYTICAL VERIFICATION OF CLOUD CONFIGURATIONS BY USERS
Project Objectives:
Cloud has emerged as a successful service-oriented paradigm to offer and manage the elastic computational and storage resources. All service commitments, such as error rate and security properties, are governed by the Service Level Agreement (SLA) between the cloud provider and its clients. However, a cheap-and-lazy cloud provider may break certain agreements due to operational or economic consideration, and the clients are often not aware of an SLA breach until data and economic losses have occurred. In this project, we will investigate approaches to enable users to verify SLA properties contained in SLAs.
Cloud has emerged as a successful service-oriented paradigm to offer and manage the elastic computational and storage resources. All service commitments, such as error rate and security properties, are governed by the Service Level Agreement (SLA) between the cloud provider and its clients. However, a cheap-and-lazy cloud provider may break certain agreements due to operational or economic consideration, and the clients are often not aware of an SLA breach until data and economic losses have occurred. In this project, we will investigate approaches to enable users to verify SLA properties contained in SLAs.
Project Activities:
We proposed a solution to ensure integrity of outsourced data. We need to guarantee the integrity of data in storage (data must be protected against improper modifications; any unauthorized updates to the data must be detected) and the integrity of query computations (query results must be correct, complete and fresh; server’s misbehavior in query evaluation must be detected).
We proposed a solution to ensure integrity of outsourced data. We need to guarantee the integrity of data in storage (data must be protected against improper modifications; any unauthorized updates to the data must be detected) and the integrity of query computations (query results must be correct, complete and fresh; server’s misbehavior in query evaluation must be detected).
Project Findings:
Project findings are summarized in the publications listed below:
Sabrina De Capitani di Vimercati, Sara Foresti, Sushil Jajodia, Giovanni Liveraga, Stefano Paraboschi, Pierangela Samarati, "Integrity for join queries in the cloud," IEEE Trans. on Cloud Computing, Vol. 1, No. 2, July-December 2013, pages 187-200.
Sabrina De Capitani Di Vimercati, Sara Foresti, Sushil Jajodia, Stefano Paraboschi, Pierangela Samarati, "Integrity for approximate joins on untrusted computational servers," Proc. IFIP Int'l. Information Security and Privacy Conf (IFIPSEC), Hamburg, Germany, May 26-28, 2015, pages 446-459.
Sabrina De Capitani di Vimercati, Sara Foresti, Sushil Jajodia, Giovanni Liverga, Stefano Paraboschi, Pierangela Samarati, "Integrity for distributed queries," IEEE Conf. on Communications and Network Security (CNS), San Francisco, CA, October 29-31, 2014, pages 364-372 (Acceptance ratio 38/130).
Sabrina De Capitani di Vimercati, Sara Foresti, Sushil Jajodia, Stefano Paraboschi, Pierangela Samarati, "Optimizing integrity checks for join queries in the cloud," Proc. 28th IFIP WG 11.3 Conference on Data and Applications Security and Privacy (DBSEC 2014), Springer Lecture Notes in Computer Science, Vol. 8566, Vijay Atluri, Gunther Pernul, eds., Vienna, Austria, July 14-16, 2014, pages 33-48 (Acceptance ratio 22/63 for full papers). Best Paper Award
Project findings are summarized in the publications listed below:
Sabrina De Capitani di Vimercati, Sara Foresti, Sushil Jajodia, Giovanni Liveraga, Stefano Paraboschi, Pierangela Samarati, "Integrity for join queries in the cloud," IEEE Trans. on Cloud Computing, Vol. 1, No. 2, July-December 2013, pages 187-200.
Sabrina De Capitani Di Vimercati, Sara Foresti, Sushil Jajodia, Stefano Paraboschi, Pierangela Samarati, "Integrity for approximate joins on untrusted computational servers," Proc. IFIP Int'l. Information Security and Privacy Conf (IFIPSEC), Hamburg, Germany, May 26-28, 2015, pages 446-459.
Sabrina De Capitani di Vimercati, Sara Foresti, Sushil Jajodia, Giovanni Liverga, Stefano Paraboschi, Pierangela Samarati, "Integrity for distributed queries," IEEE Conf. on Communications and Network Security (CNS), San Francisco, CA, October 29-31, 2014, pages 364-372 (Acceptance ratio 38/130).
Sabrina De Capitani di Vimercati, Sara Foresti, Sushil Jajodia, Stefano Paraboschi, Pierangela Samarati, "Optimizing integrity checks for join queries in the cloud," Proc. 28th IFIP WG 11.3 Conference on Data and Applications Security and Privacy (DBSEC 2014), Springer Lecture Notes in Computer Science, Vol. 8566, Vijay Atluri, Gunther Pernul, eds., Vienna, Austria, July 14-16, 2014, pages 33-48 (Acceptance ratio 22/63 for full papers). Best Paper Award