Risk-Driven Compliant Access Controls for Clouds

Details Risk-Driven Compliant Access Controls for Clouds Risk-Driven Compliant Access Controls for Clouds

2012-02-24

arxiv.org/abs/1202.5482v1

Computer Science

Distributed, Parallel, and Cluster Computing

9 pages, 3 figures. International Arab Conference on Information Technology (ACIT 2011) / Riyadh, Saudi Arabia. December 2012

Scientific paper

There is widespread agreement that cloud computing have proven cost cutting and agility benefits. However, security and regulatory compliance issues are continuing to challenge the wide acceptance of such technology both from social and commercial stakeholders. An important facture behind this is the fact that clouds and in particular public clouds are usually deployed and used within broad geographical or even international domains. This implies that the exchange of private and other protected data within the cloud environment would be governed by multiple jurisdictions. These jurisdictions have a great degree of harmonisation; however, they present possible conflicts that are hard to negotiate at run time. So far, important efforts were played in order to deal with regulatory compliance management for large distributed systems. However, measurable solutions are required for the context of cloud. In this position paper, we are suggesting an approach that starts with a conceptual model of explicit regulatory requirements for exchanging private data on a multijurisdictional environment and build on it in order to define metrics for non-compliance or, in other terms, risks to compliance. These metrics will be integrated within usual data access-control policies and will be checked at policy analysis time before a decision to allow/deny the data access is made.

Affiliated with

Also associated with

No associations

Rating

Risk-Driven Compliant Access Controls for Clouds does not yet have a rating. At this time, there are no reviews or comments for this scientific paper.

If you have personal experience with Risk-Driven Compliant Access Controls for Clouds, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Risk-Driven Compliant Access Controls for Clouds will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFWR-SCP-O-78873