Change search
ReferencesLink to record
Permanent link

Direct link
Domain-Based Storage Protection (DBSP) in Public Infrastructure Clouds
RISE, Swedish ICT, SICS. SEC.
RISE, Swedish ICT, SICS. SEC.
InfraCloud.
Number of Authors: 3
2013 (English)Conference paper (Refereed)
Abstract [en]

Confidentiality and integrity of data in Infrastructure-as-a-Service (IaaS) environments increase in relevance as adoption of IaaS advances towards maturity. While current solutions assume a high degree of trust in IaaS provider staff and infrastructure management processes, earlier incidents have demon- strated that neither are impeccable. In this paper we introduce Domain-Based Storage Protection (DBSP) a data confidentiality and integrity protection mechanism for IaaS environments, which relies on trusted computing principles to provide transparent storage isolation between IaaS clients. We describe the building blocks of this mechanism and provide a set of detailed protocols for generation and handling of keys for confidentiality and integrity pro- tection of data stored by guest VM instances. The protocols assume an untrusted IaaS provider and aim to prevent both malicious and accidental faulty config- urations that could lead to breach of data confidentiality and integrity in IaaS deployments.

Place, publisher, year, edition, pages
2013, 7. 279-296 p.
National Category
Computer and Information Science
Identifiers
URN: urn:nbn:se:ri:diva-24272OAI: oai:DiVA.org:ri-24272DiVA: diva2:1043352
Conference
18th Nordic Conference, NordSec 2013
Projects
InfraCloud
Available from: 2016-10-31 Created: 2016-10-31

Open Access in DiVA

fulltext(448 kB)4 downloads
File information
File name FULLTEXT01.pdfFile size 448 kBChecksum SHA-512
0890f9ea0858d3133384b16fad2428726fecba88d2b1e4246189060870ef20d8b6ff67959c9abebbe16f367ae36e7ed3471aa98fa0c64c25f5f9f21b47c012b8
Type fulltextMimetype application/pdf

Other links

http
By organisation
SICS
Computer and Information Science

Search outside of DiVA

GoogleGoogle Scholar
Total: 4 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

Total: 6 hits
ReferencesLink to record
Permanent link

Direct link