Auditing to keep online storage services honest

  • Authors:
  • Mehul A. Shah;Mary Baker;Jeffrey C. Mogul;Ram Swaminathan

  • Affiliations:
  • HP Labs, Palo Alto;HP Labs, Palo Alto;HP Labs, Palo Alto;HP Labs, Palo Alto

  • Venue:
  • HOTOS'07 Proceedings of the 11th USENIX workshop on Hot topics in operating systems
  • Year:
  • 2007

Quantified Score

Hi-index 0.02

Visualization

Abstract

A growing number of online service providers offer to store customers' photos, email, file system backups, and other digital assets. Currently, customers cannot make informed decisions about the risk of losing data stored with any particular service provider, reducing their incentive to rely on these services. We argue that third-party auditing is important in creating an online service-oriented economy, because it allows customers to evaluate risks, and it increases the efficiency of insurance-based risk mitigation. We describe approaches and system hooks that support both internal and external auditing of online storage services, describe motivations for service providers and auditors to adopt these approaches, and list challenges that need to be resolved for such auditing to become a reality.