A Holistic Data Privacy and Security by Design Platform-as-a-Service Framework Introducing Distributed Encrypted Persistence in Cloud-based Applications

Informations projet

PaaSword

N° de convention de subvention: 644814

DOI

10.3030/644814

Projet clôturé

Date de signature de la CE 11 Decembre 2014

Date de début 1 Janvier 2015

Date de fin 31 Decembre 2017

Financé au titre de

• INDUSTRIAL LEADERSHIP - Leadership in enabling and industrial technologies - Information and Communication Technologies (ICT)

Coût total

€ 4 461 513,00

Contribution de l’UE

€ 3 984 575,00

Coordonné par

CAS SOFTWARE AG
Germany

CORDIS fournit des liens vers les livrables publics et les publications des projets HORIZON.

Les liens vers les livrables et les publications des projets du 7e PC, ainsi que les liens vers certains types de résultats spécifiques tels que les jeux de données et les logiciels, sont récupérés dynamiquement sur OpenAIRE .

Livrables

Documents, reports (13)

Context-aware Security Model

This Deliverable will provide a model for semantically describing associations between types of access depending on the data objects and circumstances under which this access should be allowed.

Communication Activities Report

Report documenting the communication activities of the project partners with interim versions Month M12 and M24.

Publishable Final Report

Publishable version of the final report on the achievements of the project.

PaaSword Technical Requirements

Documentation of the clear and basic technical requirements that will guide the development of the IT components of PaaSword.

Scientific Workshops Report

Report documenting the PaaSword scientific workshops activities with interim versions Month M14, M22.

PaaSword Security Requirements

Documentation of the clear and basic security requirements that will guide the definition of the capabilities of the IT components and the conceptualization of the context-aware access and group policy models of PaaSword.

PaaSword Methodology

Results of Task 6.8. This deliverable will document the methodology for the deployment of the PaaSword results in new and existing software solutions in the form of adoption guidelines for practitioners from the European software industry.

Dissemination Activities Report

Report documenting the dissemination, clustering and standardization activities as well as the CS-IFG related activities of the project partners and updates of the Data Management Plan with interim versions Month M12 and M24.

Access Policies Model

This Deliverable will ontologically describe access control policies for defining sensitivity levels of data objects along with the necessary encryption and/or physical distribution that these dictate. This model will also take into account group access issues in a unified way.

Evaluation Framework and Demonstrators Planning

Results of Task 6.1. This document will contain the PaaSword evaluation framework, the validation scenario definitions and the organization of the pilot showcases, highlighting the PaaSword concepts that will be evaluated and included in each one of the involved pilot implementations.

PaaSword Reference Architecture

Documentation of the overall architecture describing the main components and artifacts of PaaSword, the interconnection scheme and the specific interfaces for exchange of information among them will be designed and described in detail.

Data Management Plan

Report documenting how research data will be handled during the project and after its completion.

PaaSword Impact Assessment

Results of Task 6.9. Report on the qualitative and quantitative impact assessment of the project's activities.

Other (1)

Distribution Algorithms and Encryption Schemes

Results of Task 4.1 – 4.3. This document lists all the distribution and encryption algorithms. The algorithms are rated for their ability to satisfy security needs like privacy, integrity and availability. The result is a document with the architecture, algorithms and the explanation of design choices. Finally, the architecture is presented and it is shown how the algorithms are used in the database proxy.

Publications

Thesis and dissertations (6)

Sicherer mobiler Zugriff auf Unternehmensdaten

Auteurs: Gunther Schiefer
Publié dans: 2015, Page(s) 336, ISBN 978-3-7386-1137-3
Éditeur: Books on Demand

Architektur eines relationalen Datenbanksystems zur verschlüsselten und verteilten Datenspeicherung in der Cloud

Auteurs: Maximilian Brunner
Publié dans: Numéro 31 March 2015, 2015, Page(s) 36
Éditeur: KIT

Enhancing Privacy and Functionality in a Distributed Secure Database Outsourcing Scheme

Auteurs: Kateryna Yurchenko
Publié dans: 2016
Éditeur: KIT

The BXT-Bitmap - An Efficient Searchable Symmetric Encryption Scheme

Auteurs: Malin Lindström and Christian Nordahl
Publié dans: 2016
Éditeur: Blekinge Institute of Technology

Kontext-sensitive Berechtigungen für Cloud-Plattformen zur Erhöhung der Datensicherheit

Auteurs: Schork, Sebastian
Publié dans: 2016
Éditeur: Hochschule Karlsruhe - University of Applied Sciences

Integration sicherer Datenspeicher in Cloud-Plattformen

Auteurs: Jens Gierke
Publié dans: 2016
Éditeur: Hochschule Karlsruhe

Non-peer reviewed articles (1)

Daten verschlüsselt speichern und verarbeiten in der Cloud

Auteurs: Jörn Müller-Quade, Matthias Huber, Tobias Nilges
Publié dans: Datenschutz und Datensicherheit - DuD, Numéro Volume 39, Numéro 8, 2015, Page(s) pp 531–535, ISSN 1614-0702
Éditeur: Springer Fachmedien
DOI: 10.1007/s11623-015-0465-x

Other (3)

A Report on Design and Implementation of Protected Searchable Data in IaaS

Auteurs: Rafael Dowsley, Antonis Michalas, Matthias Nagel
Publié dans: Technical Report, 2016
Éditeur: SICS

Challenges for trustworthy (multi-)Cloud-based services in the Digital Single Market

Auteurs: Aljosa Pasic, Beatriz Gallego, Bernd Zwattendorfer, Bojan Suzic, Elsa Prieto, Erkuden Rios, Josep Domingo-Ferrer, Julia Vuong, Massimiliano Rak, Nicholas Ferguson, Nuria Rodríguez, Peter H. Deussen, Pierangela Samarati, Roberto Cascella, Sabrina de Capitani, Simone Braun, Stephan Krenn, Stephanie Parker, Thomas Länger, Thomas Lorünser, Zhiming Zhao
Publié dans: Numéro 28 January 2016, 2016
Éditeur: DPSP Cluster

Research and Innovation Challenges in Data Protection, Security and Privacy in the Cloud: Map of synergies of the clustered projects – Version 2.0

Auteurs: Beatriz Gallego-Nicasio Crespo, Elsa Prieto, Erkuden Rios, Massimiliano Rak, Peter Deussen, Pierangela Samarati, Roberto Cascella, Simone Braun, Stephan Krenn, Thomas Lörunser
Publié dans: Numéro 15 January 2016, 2016
Éditeur: DPSP Cluster

Conference proceedings (17)

Towards Trusted eHealth Services in the Cloud

Auteurs: Antonis Michalas, Rafael Dowsley
Publié dans: 2015 IEEE/ACM 8th International Conference on Utility and Cloud Computing (UCC), 2015, Page(s) 618-623
Éditeur: IEEE

Context-aware Security Models for PaaS-enabled Access Control

Auteurs: Simeon Veloudis, Yiannis Verginadis, Ioannis Patiniotakis, Iraklis Paraskakis, Gregoris Mentzas
Publié dans: Proceedings of the 6th International Conference on Cloud Computing and Services Science, 2016, Page(s) 202-212, ISBN 978-989-758-182-3
Éditeur: SCITEPRESS - Science and and Technology Publications
DOI: 10.5220/0005918602020212

A Survey on Context Security Policies

Auteurs: Yiannis Verginadis, Gregoris Mentzas, Simeon Veloudis, Iraklis Paraskakis
Publié dans: 2015 IEEE/ACM 8th International Conference on Utility and Cloud Computing (UCC), Numéro December 7-10, 2015, 2015, Page(s) 589 - 594
Éditeur: IEEE
DOI: 10.1109/UCC.2015.103

Towards Secure Multi-tenant Virtualized Networks

Auteurs: Nicolae Paladi, Christian Gehrmann
Publié dans: 2015 IEEE Trustcom/BigDataSE/ISPA, Numéro The 13th IEEE International Symposium on Parallel and Distributed Processing with Applications, 2015, Page(s) 1180-1185, ISBN 978-1-4673-7952-6
Éditeur: IEEE
DOI: 10.1109/Trustcom.2015.502

Towards Secure SDN Policy Management

Auteurs: Nicolae Paladi
Publié dans: 2015 IEEE/ACM 8th International Conference on Utility and Cloud Computing (UCC), 2015, Page(s) 607 - 611
Éditeur: IEEE
DOI: 10.1109/UCC.2015.106

Data Distribution and Encryption Modelling for PaaS-enabled Cloud Security

Auteurs: Yiannis Verginadis, Ioannis Patiniotakis, Gregoris Mentzas, Simeon Veloudis, Iraklis Paraskakis
Publié dans: 2016 IEEE International Conference on Cloud Computing Technology and Science (CloudCom), 2016, Page(s) 497-502, ISBN 978-1-5090-1445-3
Éditeur: IEEE
DOI: 10.1109/CloudCom.2016.0087

Searchable Encrypted Relational Databases: Risks and Countermeasures

Auteurs: Mohamed Ahmed Abdelraheem, Tobias Andersson, Christian Gehrmann
Publié dans: 2017, Page(s) 70-85
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-319-67816-0_5

Performance and Security Evaluation of SDN Networks in OMNeT++/INET

Auteurs: Marco Tiloca, Alexandra Stagkopoulou, Gianluca Dini
Publié dans: OMNeT++ Community Summit 2016, 2016
Éditeur: CoRR

IoT Protection through Device to Cloud Synchronization

Auteurs: Christian Gehrmann, Mohamed Ahmed Abdelraheem
Publié dans: 2016 IEEE International Conference on Cloud Computing Technology and Science (CloudCom), 2016, Page(s) 527-532, ISBN 978-1-5090-1445-3
Éditeur: IEEE
DOI: 10.1109/CloudCom.2016.0092

TruSDN: Bootstrapping Trust in Cloud Network Infrastructure

Auteurs: Nicolae Paladi, Christian Gehrmann
Publié dans: 2017, Page(s) 104-124
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-319-59608-2_6

Executing Boolean Queries on an Encrypted Bitmap Index

Auteurs: Mohamed Ahmed Abdelraheem, Christian Gehrmann, Malin Lindström, Christian Nordahl
Publié dans: Proceedings of the 2016 ACM on Cloud Computing Security Workshop - CCSW '16, 2016, Page(s) 11-22, ISBN 9781-450345729
Éditeur: ACM Press
DOI: 10.1145/2996429.2996436

Application of the holistic Data Privacy and Security Framework PaaSword - A focus on the integration in industrial Pilots

Auteurs: Sebastian Thomas Schork, Antonia Schwichtenberg, Spiros Alexakis, George Moldovan
Publié dans: Proceedings of the 12th International Conference on Availability, Reliability and Security - ARES '17, 2017, Page(s) 1-10, ISBN 9781-450352574
Éditeur: ACM Press
DOI: 10.1145/3098954.3104060

PaaSword: A Holistic Data Privacy and Security by Design Framework for Cloud Services

Auteurs: Yiannis Verginadis, Antonis Michalas, Panagiotis Gouvas, Gunther Schiefer, Gerald Hübsch, Iraklis Paraskakis
Publié dans: Proceedings of the 5th International Conference on Cloud Computing and Services Science, 2015, Page(s) 206-213, ISBN 978-989-758-104-5
Éditeur: SCITEPRESS - Science and and Technology Publications
DOI: 10.5220/0005489302060213

Security in a Distributed Key Management Approach

Auteurs: Gunther Schiefer, Matthias Gabel, Jeremias Mechler, Andreas Schoknecht, Murat Citak
Publié dans: 2017 IEEE 30th International Symposium on Computer-Based Medical Systems (CBMS), 2017, Page(s) 816-821, ISBN 978-1-5386-1710-6
Éditeur: IEEE
DOI: 10.1109/CBMS.2017.151

A Distributed Key Management Approach

Auteurs: Rafael Dowsley, Matthias Gabel, Gerald Hubsch, Gunther Schiefer, Antonia Schwichtenberg
Publié dans: 2016 IEEE International Conference on Cloud Computing Technology and Science (CloudCom), 2016, Page(s) 509-514, ISBN 978-1-5090-1445-3
Éditeur: IEEE
DOI: 10.1109/CloudCom.2016.0089

Secure Database Outsourcing to the Cloud: Side-Channels, Counter-Measures and Trusted Execution

Auteurs: Matthias Gabel, Jeremias Mechler
Publié dans: 2017 IEEE 30th International Symposium on Computer-Based Medical Systems (CBMS), 2017, Page(s) 799-804, ISBN 978-1-5386-1710-6
Éditeur: IEEE
DOI: 10.1109/CBMS.2017.141

Towards Efficient and Secure Data Storage in Multi-Tenant Cloud-Based CRM Solutions

Auteurs: Julia Vuong, Simone Braun
Publié dans: 1st International Workshop on Cloud Security and Data Privacy by Design (CloudSPD'15), 2015 IEEE/ACM 8th International Conference on Utility and Cloud Computing (UCC), Numéro 10 December 2015, 2015, Page(s) 612 - 617
Éditeur: IEEE
DOI: 10.1109/UCC.2015.107

Peer reviewed articles (4)

ASArP: Automated Security Assessment & Audit of Remote Platforms using TCG-SCAP synergies

Auteurs: Mudassar Aslam, Christian Gehrmann, Mats Björkman
Publié dans: Journal of Information Security and Applications, Numéro 22, 2015, Page(s) 28-39, ISSN 2214-2126
Éditeur: Elsevier
DOI: 10.1016/j.jisa.2014.09.001

Providing User Security Guarantees in Public Infrastructure Clouds

Auteurs: Nicolae Paladi, Christian Gehrmann, Antonis Michalas
Publié dans: IEEE Transactions on Cloud Computing, Numéro 5/3, 2017, Page(s) 405-419, ISSN 2168-7161
Éditeur: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/TCC.2016.2525991

PaaSword: A Holistic Data Privacy and Security by Design Framework for Cloud Services

Auteurs: Yiannis Verginadis, Antonis Michalas, Panagiotis Gouvas, Gunther Schiefer, Gerald Hübsch, Iraklis Paraskakis
Publié dans: Journal of Grid Computing, Numéro 15/2, 2017, Page(s) 219-234, ISSN 1570-7873
Éditeur: Kluwer Academic Publishers
DOI: 10.1007/s10723-017-9394-2

Security-by-Design in der Cloud-Anwendungsentwicklung

Auteurs: Andreas Schoknecht, Gunther Schiefer, Murat Citak, Andreas Oberweis
Publié dans: HMD Praxis der Wirtschaftsinformatik, Numéro 53/5, 2016, Page(s) 688-697, ISSN 1436-3011
Éditeur: Springer Fachmedien
DOI: 10.1365/s40702-016-0258-1