Enabling Security in Cloud Storage SLAs with CloudProof

DMCA

Enabling Security in Cloud Storage SLAs with CloudProof (2011)

Cached

Download Links

by Raluca Ada Popa , Jacob R. Lorch , David Molnar , Helen J. Wang , Li Zhuang

Venue:	In Proc. USENIX ATC
Citations:	38 - 5 self

BibTeX

@INPROCEEDINGS{Popa11enablingsecurity,
    author = {Raluca Ada Popa and Jacob R. Lorch and David Molnar and Helen J. Wang and Li Zhuang},
    title = {Enabling Security in Cloud Storage SLAs with CloudProof},
    booktitle = {In Proc. USENIX ATC},
    year = {2011}
}

OpenURL

Abstract

Several cloud storage systems exist today, but none of them provide security guarantees in their Service Level Agreements (SLAs). This lack of security support has been a major hurdle for the adoption of cloud services, especially for enterprises and cautious consumers. To fix this issue, we present CloudProof, a secure storage system specifically designed for the cloud. In CloudProof, customers can not only detect violations of integrity, write-serializability, and freshness, they can also prove the occurrence of these violations to a third party. This proof-based system is critical to enabling security guarantees in SLAs, wherein clients pay for a desired level of security and are assured they will receive a certain compensation in the event of cloud misbehavior. Furthermore, since CloudProof aims to scale to the size of large enterprises, we delegate as much work as possible to the cloud and use cryptographic tools to allow customers to detect and prove cloud misbehavior. Our evaluation of CloudProof indicates that its security mechanisms have a reasonable cost: they incur a latency overhead of only ∼15 % on reads and writes, and reduce throughput by around 10%. We also achieve highly scalable access control, with membership management (addition and removal of members ’ permissions) for a large proprietary software with more than 5000 developers taking only a few seconds per month. 1

Keyphrases

cloud storage slas security guarantee cloud misbehavior detect violation scalable access control latency overhead much work membership management cloudproof aim desired level major hurdle large proprietary software service level agreement proof-based system several cloud storage system certain compensation cryptographic tool member permission wherein client reasonable cost security mechanism large enterprise cautious consumer third party secure storage system security support cloud service

DMCA