Managing Data Access on Clouds: A Generic Framework for Enforcing Security Policies

Abstract

Abstract-Recently there has been a great need to provide an adequate security level in Cloud Environments, as they are vulnerable to various attacks. Malicious behaviors such as Denial of Service attacks, especially when targeting large-scale data management systems, cannot be detected by typical authentication mechanisms and are responsible for drastically degrading the overall performance of such systems. In this paper we propose a generic security management framework allowing providers of Cloud data management systems to define and enforce complex security policies. This security framework is designed to detect and stop a large array of attacks defined through an expressive policy description language and to be easily interfaced with various data management systems. We show that we can efficiently protect a data storage system, by evaluating our security framework on top of the BlobSeer data management platform. We evaluate the benefits of preventing a DoS attack targeted towards BlobSeer through experiments performed on the Grid'5000 testbed.

A New Trend for E-Learning in KSA Using Educational Clouds

“…Thus, some challenges may be more to do with perception than reality [30]. These challenges include: 1) Security threats: A major obstacle to cloud computing is the security threats including tampering or leakage of sensitive data on the cloud, loss of privacy and the unauthorized use of the data by cloud providers [62][63][64][65][66][67]. Hence, a number of security requirements should be satisfied by educational cloud computing systems to protect data from these threats [55,56].…”

A semantic-based access control for ensuring data security in cloud computing

“…A Generic Policy Management framework has been designed to define and enforce access decision which proves effective only for specific types of attacks [3].…”

Software as a service: Understanding security issues

“…However, authors have proved their approaches efficiency on SQL-like database structure only. To achieve high-level data access control scheme, [19] proposed a generic security management framework that enables cloud storage providers to define and enforce flexible security policies. This approach firstly defines templates of various attacks and map them into security policies, then based on these policies a security violation detection engine is developed to search for recorded user actions that match the template events defined by the policy.…”