Article in Proceedings INPROC-2010-29

BibliographyBrandic, Ivona; Anstett, Tobias; Schumm, David; Leymann, Frank; Dustdar, Schahram; Konrad, Ralf: Compliant Cloud Computing (C3): Architecture and Language Support for User-driven Compliance Management in Clouds.
In: Proceedings of the 3rd International Conference on Cloud Computing (IEEE Cloud 2010).
University of Stuttgart, Faculty of Computer Science, Electrical Engineering, and Information Technology.
pp. 1-8, english.
IEEE, July 5, 2010.
Article in Proceedings (Conference Paper).
CR-SchemaD.3.2 (Programming Language Classifications)
D.3.3 (Programming Language Constructs and Features)
KeywordsCloud Computing, Compliance
Abstract

Cloud computing represents a promising computing paradigm, where computational power is provided similar to utilities like water, electricity or gas. While most of the Cloud providers can guarantee some measurable non-functional performance metrics e.g., service availability or throughput, there is lack of adequate mechanisms for guaranteeing certifiable and auditable security, trust, and privacy of the applications and the data they process. This lack represents an obstacle for moving most business relevant applications into the Cloud. In this paper we devise a novel approach for compliance management in Clouds, which we termed Compliant Cloud Computing (C3). On one hand, we propose novel languages for specifying compliance requirements concerning security, privacy, and trust by leveraging Domain Specific Languages and Compliance Level Agreements. On the other hand, we propose the C3 middleware responsible for the deployment of certifiable and auditable applications, for provider selection in compliance with the user requirements, and for enactment and enforcement of compliance level agreements. We underpin our approach with a use case discussing various techniques necessary for achieving security, privacy, and trust in Clouds as for example data fragmentation among different protection domains or among different geographical regions.

Department(s)University of Stuttgart, Institute of Architecture of Application Systems
Project(s)COMPAS
MASTER
Entry dateMay 10, 2010
   Publ. Institute   Publ. Computer Science