Towards a data-centric view of cloud security

Authors:
Wenchao Zhou;Micah Sherr;William R. Marczak;Zhuoyao Zhang;Tao Tao;Boon Thau Loo;Insup Lee
Affiliations:
University of Pennsylvania, Philadelphia, PA, USA;Georgetown University, Washington, DC, USA;University of California at Berkeley, Berkeley, CA, USA;University of Pennsylvania, Philadelphia, PA, USA;University of Pennsylvania, Philadelphia, PA, USA;University of Pennsylvania, Philadelphia, PA, USA;University of Pennsylvania, Philadelphia, PA, USA
Venue:
CloudDB '10 Proceedings of the second international workshop on Cloud data management
Year:
2010

Citing 32
Cited 1

Authentication in distributed systems: theory and practice

ACM Transactions on Computer Systems (TOCS)
Chord: A scalable peer-to-peer lookup service for internet applications

Proceedings of the 2001 conference on Applications, technologies, architectures, and protocols for computer communications
Why and Where: A Characterization of Data Provenance

ICDT '01 Proceedings of the 8th International Conference on Database Theory
Logic in Access Control

LICS '03 Proceedings of the 18th Annual IEEE Symposium on Logic in Computer Science
Binder, a Logic-Based Security Language

SP '02 Proceedings of the 2002 IEEE Symposium on Security and Privacy
Secrecy, authentication, and public key systems.

Secrecy, authentication, and public key systems.
Extending query rewriting techniques for fine-grained access control

SIGMOD '04 Proceedings of the 2004 ACM SIGMOD international conference on Management of data
Declarative routing: extensible routing with declarative queries

Proceedings of the 2005 conference on Applications, technologies, architectures, and protocols for computer communications
Implementing declarative overlays

Proceedings of the twentieth ACM symposium on Operating systems principles
Dynamic authenticated index structures for outsourced databases

Proceedings of the 2006 ACM SIGMOD international conference on Management of data
ORCHESTRA: facilitating collaborative data sharing

Proceedings of the 2007 ACM SIGMOD international conference on Management of data
MapReduce: simplified data processing on large clusters

OSDI'04 Proceedings of the 6th conference on Symposium on Opearting Systems Design & Implementation - Volume 6
Provenance semirings

Proceedings of the twenty-sixth ACM SIGMOD-SIGACT-SIGART symposium on Principles of database systems
PeerReview: practical accountability for distributed systems

Proceedings of twenty-first ACM SIGOPS symposium on Operating systems principles
Querying the internet with PIER

VLDB '03 Proceedings of the 29th international conference on Very large data bases - Volume 29
Update exchange with mappings and provenance

VLDB '07 Proceedings of the 33rd international conference on Very large data bases
Verifying Completeness of Relational Query Answers from Online Servers

ACM Transactions on Information and System Security (TISSEC)
Evita raced: metacompilation for declarative networks

Proceedings of the VLDB Endowment
Virtualization and Hardware-Based Security

IEEE Security and Privacy
The case of the fake Picasso: preventing history forgery with secure provenance

FAST '09 Proccedings of the 7th conference on File and storage technologies
Partially materialized digest scheme: an efficient verification method for outsourced databases

The VLDB Journal — The International Journal on Very Large Data Bases
Unified Declarative Platform for Secure Netwoked Information Systems

ICDE '09 Proceedings of the 2009 IEEE International Conference on Data Engineering
Recursive Computation of Regions and Connectivity in Networks

ICDE '09 Proceedings of the 2009 IEEE International Conference on Data Engineering
The Eucalyptus Open-Source Cloud-Computing System

CCGRID '09 Proceedings of the 2009 9th IEEE/ACM International Symposium on Cluster Computing and the Grid
On Technical Security Issues in Cloud Computing

CLOUD '09 Proceedings of the 2009 IEEE International Conference on Cloud Computing
Resource management for isolation enhanced cloud services

Proceedings of the 2009 ACM workshop on Cloud computing security
Managing security of virtual machine images in a cloud environment

Proceedings of the 2009 ACM workshop on Cloud computing security
Cloud security is not (just) virtualization security: a short paper

Proceedings of the 2009 ACM workshop on Cloud computing security
Boom analytics: exploring data-centric, declarative programming for the cloud

Proceedings of the 5th European conference on Computer systems
Efficient querying and maintenance of network provenance at internet-scale

Proceedings of the 2010 ACM SIGMOD International Conference on Management of data
SecureBlox: customizable secure distributed data processing

Proceedings of the 2010 ACM SIGMOD International Conference on Management of data
Querying data provenance

Proceedings of the 2010 ACM SIGMOD International Conference on Management of data

Multimedia Applications and Security in MapReduce: Opportunities and Challenges

Concurrency and Computation: Practice & Experience

Quantified Score

Hi-index	0.01

Visualization

Abstract

Cloud security issues have recently gained traction in the research community, with much of the focus primarily concentrated on securing the operating systems and virtual machines on which the services are deployed. In this paper, we take an alternative perspective and propose a data-centric view of cloud security. In particular, we explore the security properties of secure data sharing between applications hosted in the cloud. We discuss data management challenges in the areas of secure distributed query processing, system analysis and forensics, and query correctness assurance, and describe our current efforts towards meeting these challenges using our Declarative Secure Distributed Systems (DS2) platform.