Skip to main content
SpringerLink
Log in

A Generic Framework for Representing Context-Aware Security Policies in the Cloud

  • Conference paper
  • First Online:
Cloud Computing and Services Science (CLOSER 2016)

Part of the book series: Communications in Computer and Information Science ((CCIS,volume 740))

Included in the following conference series:

  • 682 Accesses

Abstract

Enterprises are increasingly embracing cloud computing in order to reduce costs and increase agility in their everyday business operations. Nevertheless, due mainly to confidentiality, privacy and integrity concerns, many organisations are reluctant to migrate their sensitive data to the cloud. In order to alleviate these security concerns, this chapter proposes the PaaSword framework: a generic PaaS solution that provides capabilities for guiding developers through the process of defining appropriate policies for protecting their sensitive data. More specifically, this chapter outlines the construction of an extensible and declarative formalism for representing policy-related knowledge, one which disentangles the definition of a policy from the code employed for enforcing it. It also outlines the construction of a suitable Context-aware Security Model, a framework of concepts and properties in terms of which the policy-related knowledge is expressed.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 39.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Notes

  1. 1.

    All USDL-SEC classes and properties are prefixed with the usdl-sec namespace. To avoid notational clutter, this namespace is omitted here.

References

  1. Cisco: Cloud: What an Enterprise Must Know, Cisco White Paper (2011)

    Google Scholar 

  2. Vaquero, L.M., Rodero-Merino, L., Caceres, J., Lindner, M.: A break in the clouds: towards a cloud definition. SIGCOMM Comput. Commun. Rev. 39(1), 50–55 (2008)

    Article  Google Scholar 

  3. Micro, T.: The Need for Cloud Computing Security. Trend Micro (2010)

    Google Scholar 

  4. NIST: Cloud Computing Reference Architecture, National Institute of Standards and Technology (2011)

    Google Scholar 

  5. CSA: The Notorious Nine. Cloud Computing Top Threats in 2013. Cloud Security Alliance (2013)

    Google Scholar 

  6. Verginadis, Y., Michalas, A., Gouvas, P., Schiefer, G., Hübsch, G., Paraskakis, I.: PaaSword: a holistic data privacy and security by design framework for cloud services. In: Proceedings of the 5th International Conference on Cloud Computing and Services Science, CLOSER 2015, 20–22 May, Lisbon, Portugal (2015)

    Google Scholar 

  7. Ferrari, E.: Access Control in Data Management Systems. Synthesis Lectures on Data Management, vol. 2, no. 1, pp. 1–117. Morgan & Claypool (2010)

    Google Scholar 

  8. Dey, A.K.: Understanding and using context. Pers. Ubiquit. Comput. J. 5(1), 4–7 (2001)

    Article  Google Scholar 

  9. OASIS: OASIS eXtensible Access Control Markup Language (XACML) (2013). http://docs.oasis-open.org/xacml/3.0/xacml-3.0-core-spec-os-en.html

  10. Linked USDL (2014). http://linked-usdl.org/

  11. Pedrinaci, C., Cardoso, J. Leidig, T.: Linked USDL: a vocabulary for web-scale service trading. In: 11th Extended Semantic Web Conference (ESWC) (2014)

    Google Scholar 

  12. Strang, T., Linnhoff-Popien, C.: A Context modeling survey. In: Workshop on Advanced Context Modelling, Reasoning and Management, UbiComp 2004 - The Sixth International Conference on Ubiquitous Computing, Nottingham, England (2004)

    Google Scholar 

  13. Bettini, C., Brdiczka, O., Henricksen, K., Indulska, J., Nicklas, D., Ranganathan, A., Riboni, D.: A survey of context modelling and reasoning techniques. Pervasive Mob. Comput., 161–180 (2010)

    Google Scholar 

  14. Miele, A., Quintarelli, E., Tanca, L.: A methodology for preference-based personalization of contextual data. In: ACM Proceedings of the 12th International Conference on Extending Database Technology: Advances in Database Technology, EDBT 2009, Saint-Petersburg, Russia, pp. 287–298 (2009)

    Google Scholar 

  15. Bucchiarone, A., Kazhamiakin, R., Cappiello, C., Nitto, E., Mazza, V.: A context-driven adaptation process for service-based applications. In: ACM Proceedings of the 2nd International Workshop on Principles of Engineering Service-Oriented Systems, PESOS 2010, Cape Town, South Africa, pp. 50–56 (2010)

    Google Scholar 

  16. Truong, H.-L., Manzoor, A., Dustdar, S.: On modeling, collecting and utilizing context information for disaster responses in pervasive environments. In: ACM Proceedings of the First International Workshop on Context-Aware Software Technology and Applications, CASTA 2009, Amsterdam, The Netherlands, pp. 25–28 (2009)

    Google Scholar 

  17. Abowd, G., Mynatt, E.: Charting past, present, and future research in ubiquitous computing. ACM Trans. Comput. Hum. Interact. (TOCHI), 29–58 (2000). Special issue on human-computer interaction in the new millennium

    Google Scholar 

  18. Heupel, M., Fischer, L., Bourimi, M., Kesdogan, D., Scerri, S., Hermann, F., Gimenez, R.: Context-aware, trust-based access control for the di.me userware. In: Proceedings of the 5th International Conference on New Technologies, Mobility and Security, NTMS 2012, Istanbul, Turkey, pp. 1–6. IEEE Computer Society (2012)

    Google Scholar 

  19. Jung, C., Eitel, A., Schwarz, R.: Cloud security with context-aware usage control policies. In: Proceedings of the INFORMATIK 2014 Conference, pp. 211–222 (2014)

    Google Scholar 

  20. Verginadis, Y., Mentzas, G., Veloudis, S., Paraskakis, I.: A survey on context security policies. In: Proceedings of the 1st International Workshop on Cloud Security and Data Privacy by Design, CloudSPD 2015, Co-located with the 8th IEEE/ACM International Conference on Utility and Cloud Computing, Limassol, Cyprus, 7–10 December (2015)

    Google Scholar 

  21. Specification of Deliberation RuleML 1.01 (2015). http://wiki.ruleml.org/index.php/Specification_of_Deliberation_RuleML_1.01

  22. Security Assertions Markup Language (SAML) Version 2.0. Technical Overview (2008). https://www.oasis-open.org/committees/download.php/27819/sstc-saml-tech-overview-2.0-cd-02.pdf

  23. WS-Trust 1.3 (2007). http://docs.oasis-open.org/ws-sx/ws-trust/200512/ws-trust-1.3-os.doc

  24. Uszok, A., Bradshaw, J., Jeffers, R., Johnson, M., Tate, A., Dalton, J., Aitken, S.: KAoS policy management for semantic web services. IEEE Intel. Sys. 19(4), 32–41 (2005)

    Article  Google Scholar 

  25. Kagal, L., Finin, T., Joshi, A.: A policy language for a pervasive computing environment. In: 4th IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2003 (2003)

    Google Scholar 

  26. Hu, H., Ahn, G.-J., Kulkarni, K.: Ontology-based policy anomaly management for autonomic computing. In: 7th International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom) (2011)

    Google Scholar 

  27. OWL Web Ontology Language Reference. W3C Recommendation (2004). http://www.w3.org/TR/owl-ref/

Download references

Acknowledgements

The research leading to these results has received funding from the European Union’s Horizon 2020 research and innovation programme under grant agreement No. 644814. The authors would like to thank the partners of the PaaSword project (www.paasword.eu) for their valuable advice and comments.

Author information

Authors and Affiliations

  1. South East European Research Centre (SEERC), International Faculty, CITY College, The University of Sheffield, 24 Proxenou Koromila Street, 54622, Thessaloniki, Greece

    Simeon Veloudis & Iraklis Paraskakis

  2. Institute of Communications and Computer Systems, National Technical University of Athens, Athens, Greece

    Yiannis Verginadis, Ioannis Patiniotakis & Gregoris Mentzas

Authors
  1. Simeon Veloudis
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Iraklis Paraskakis
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Yiannis Verginadis
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Ioannis Patiniotakis
    View author publications

    You can also search for this author in PubMed Google Scholar

  5. Gregoris Mentzas
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Iraklis Paraskakis .

Editor information

Editors and Affiliations

  1. Dublin City University, Dublin, Ireland

    Markus Helfert

  2. Columbia University, New York, New York, USA

    Donald Ferguson

  3. Escola d’Enginyeria, Bellaterra, Barcelona, Spain

    Victor Méndez Muñoz

  4. Departamento de Engenharia Informática, Universidade de Coimbra, Coimbra, Portugal

    Jorge Cardoso

Rights and permissions

Reprints and permissions

Copyright information

© 2017 Springer International Publishing AG

About this paper

Cite this paper

Veloudis, S., Paraskakis, I., Verginadis, Y., Patiniotakis, I., Mentzas, G. (2017). A Generic Framework for Representing Context-Aware Security Policies in the Cloud. In: Helfert, M., Ferguson, D., Méndez Muñoz, V., Cardoso, J. (eds) Cloud Computing and Services Science. CLOSER 2016. Communications in Computer and Information Science, vol 740. Springer, Cham. https://doi.org/10.1007/978-3-319-62594-2_17

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-62594-2_17

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-62593-5

  • Online ISBN: 978-3-319-62594-2

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation