Adaptable, model-driven security engineering for SaaS cloud-based applications
Automated Software Engineering
| Hi-index | 0.00 |
As a part of Cloud computing, Software as a Service(SaaS) enables users to cut their costs by outsourcing software as a service on-demand, in which both computation and storage are handled on server-side. However, data must be decrypted into memory when performing the computation, even though they can be encrypted during storage and transmission. In this case, the privileged administrators of SaaS providers are able to inspect or modify users' data and computations. As a result, the users will not trust the SaaS providers, which is the number one factor blocking the wide adoption of SaaS. To address this problem this paper proposes a trusted SaaS platform(TSP). Besides guaranteeing data security during storage and transmission, TSP enforces a trusted execution environment(TEE) that guarantees the confidentiality and integrity of the users' data and computations.