Using Risk Patterns to Identify Violations of Data Protection Policies in Cloud Systems

Schoenen, Stefan; Mann, Zoltán Ádám; Metzger, Andreas

doi:10.1007/978-3-319-91764-1_24

Cited by 11 publications

(17 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A risk pattern is a sub-structure of a cloud system configuration, which threatens the protection of sensitive data and therefore has to be avoided [26]. A risk pattern can typically be divided into three parts (see Fig.…”

Section: Structure Of Risk Patternsmentioning

confidence: 99%

“…From a graph-theoretic point of view, a risk pattern defines a path from an attacker to the sensitive data (the path through which the attacker may be able to access the data), plus an additional path between the same two vertices encoding that the data belong to a data subject who does not trust the attacker. This means that instead of a general graph pattern matching problem as suggested in [26], only subgraphs of very limited structure (cycle graphs) must be searched for in the cloud model, which may require significantly less computation.…”

Section: Characteristics Of Risk Patternsmentioning

confidence: 99%

“…To identify and mitigate data protection risks in complex and dynamic cloud systems, we have introduced the concept of risk patterns in our earlier work [26]. That approach was based on two types of artefacts:…”

Section: Introductionmentioning

confidence: 99%

“…Our previous work [26,17] evaluated the risk pattern approach using two example risk patterns. The evaluation showed that, if the relevant data protection vulnerabilities are captured in the form of risk patterns, then these risk patterns can indeed be used to detect and mitigate the data protection risks during deployment and at run time.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Modeling Data Protection Vulnerabilities of Cloud Systems Using Risk Patterns

Palm

Mann

Metzger

2018

System Analysis and Modeling. Languages, Methods, and Tools for Systems Engineering

Self Cite

View full text Add to dashboard Cite

Ensuring the protection of sensitive data is important for the adoption of cloud services. Cloud systems are becoming increasingly complex and dynamic, leading to various potential scenarios for attackers to get access to sensitive data. To handle such data protection risks, the concept of risk patterns was introduced previously. A risk pattern models a structural fragment of cloud systems that should not appear in the running system because it would lead to high data protection risks. At deployment and at run time, graph pattern matching and dynamic re-configuration methods can be used to ensure that the run-time model of the cloud system contains no instance of the risk patterns. The previous work left it open, however, how and to what extent real data protection vulnerabilities can be modeled in the form of risk patterns. Therefore, this paper focuses on the design of risk patterns based on vulnerabilities described in the literature. Based on an analysis of 87 papers, we determined 45 risk patterns. Our findings (i) demonstrate that risk patterns can indeed capture many of the vulnerabilities described in the cloud literature, (ii) give insight into the typical structure of risk patterns, and (iii) show the limits of the applicability of the risk pattern approach.

show abstract

Section: Structure Of Risk Patternsmentioning

confidence: 99%

Section: Characteristics Of Risk Patternsmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Modeling Data Protection Vulnerabilities of Cloud Systems Using Risk Patterns

Palm

Mann

Metzger

2018

System Analysis and Modeling. Languages, Methods, and Tools for Systems Engineering

Self Cite

View full text Add to dashboard Cite

show abstract

“…To make sound adaptation decisions at run time, one needs a model of the system, its requirements and environment. The model must be available at run time to enable online reasoning, hence it is called model@runtime [4]. Data protection concerns relate to all layers of the cloud stack, including secure hardware capabilities, co-location of different tenants on the same server, encryption of communication between application components, and data anonymization.…”

Section: Run-time Data Protection Assurancementioning

confidence: 99%

Secure Data Processing in the Cloud

Mann

Salant

Surridge

et al. 2018

Communications in Computer and Information Science

Self Cite

View full text Add to dashboard Cite

Data protection is a key issue in the adoption of cloud services. The project "RestAssured-Secure Data Processing in the Cloud," financed by the European Union's Horizon 2020 research and innovation programme, addresses the challenge of data protection in the cloud with a combination of innovative security solutions, data lifecycle management techniques, run-time adaptation, and automated risk management. This paper gives an overview about the project's goals and current status.

show abstract