Data Outsourcing Simplified: Generating Data Connectors from Confidentiality and Access Policies

Abstract

For cloud-based outsourcing of confidential data, various techniques based on cryptography or data-fragmentation have been proposed, each with its own tradeoff between confidentiality, performance, and the set of supported queries. However, it is complex and error-prone to select appropriate techniques to individual scenarios manually. In this paper, we present a policy-based approach consisting of a domain specific language and a policy-transformator to automatically generate scenariospecific software adapters called mediators that set up data outsourcing and govern data access. Mediators combine stateof-the-art confidentiality techniques to ensure a user-specified level of confidentiality while still offering efficient data access. Thus, our approach simplifies data outsourcing by decoupling policy decisions from their technical implementation and realizes appropriate tradeoffs between confidentiality and efficiency.

User-centric management of distributed credential repositories

“…This methodology is also applied in other publications [14,19]. However, the application domains differ significantly from the problem at hand.…”

“…The choice which store to add in each step depends on the benefit for adding the store (cf. line [8][9][10][11][12][13][14][15][16][17][18][19][20][21][22][23][24]. The store's benefit is calculated by dividing the gain in key-availability ∆a by the gain in key-vulnerability ∆v that would result from adding the current bundle including the store to the solution.…”

“…Furthermore, especially when facing the cloud computing paradigm or outsourcing scenarios in general, stronger secrets like cryptographic keys for encryption [14] or authentication [17,18,29] need to be managed. From a user's perspective it is hard to keep track of those secrets because of the quantity of password credentials and due to cryptographic keys not being made for being memorable.…”

“…This process is repeated until curP rec falls below the required precision prec (line 4). Once the algorithm terminates, the last key fragments distribution that adhered to the key-availability boundary condition of the original problem is returned (lines 8,14).…”

Confidential database-as-a-service approaches: taxonomy and survey

“…Approaches for integrating CPIs have been proposed [7,8,45], however, further exploration of the potential of the symbiotic effects between CPIs with regard to security and performance is another interesting future research challenge.…”