Architectural runtime models for privacy checks of cloud applications (bibtex)
by Schmieders, Eric, Metzger, Andreas and Pohl, Klaus
Abstract:
—Cloud providers as well as cloud customers are obliged to comply with privacy regulations. In particular, these regulations prescribe compliance to geo-location policies that define at which geographical locations personal data may be stored or processed. However, cloud elasticity dynamically adapts computing resources to workload changes by replicating and migrating components as well as included data among data centers. As a result, data might be moved to different geograph-ical locations, thereby violating geo-location policies. Current approaches for cloud monitoring and compliance fall short in detecting relevant cases of such policy violations, particularly cases that involve data transfers among data centers. We address this gap by exploiting runtime models for the analysis of privacy violations during runtime. In this paper, we introduce architec-tural runtime models that reflect information about application components, their interactions, and their cloud deployments. We combine push-based heartbeat monitoring with event processing, and graph grammars for efficiently updating those models. An empirical evaluation based on a prototypical implementation applied to Amazon EC2 and the CoCoME case study indicates that the runtime model approach accurately and efficiently reflects changes of cloud applications.
Reference:
Architectural runtime models for privacy checks of cloud applications (Schmieders, Eric, Metzger, Andreas and Pohl, Klaus), In ICSE Workshop on Principles of Engineering Service Oriented Systems, ACM, volume 2015-July, 2015.
Bibtex Entry:
@inproceedings{schmieders_architectural_2015,
abstract = {—Cloud providers as well as cloud customers are obliged to comply with privacy regulations. In particular, these regulations prescribe compliance to geo-location policies that define at which geographical locations personal data may be stored or processed. However, cloud elasticity dynamically adapts computing resources to workload changes by replicating and migrating components as well as included data among data centers. As a result, data might be moved to different geograph-ical locations, thereby violating geo-location policies. Current approaches for cloud monitoring and compliance fall short in detecting relevant cases of such policy violations, particularly cases that involve data transfers among data centers. We address this gap by exploiting runtime models for the analysis of privacy violations during runtime. In this paper, we introduce architec-tural runtime models that reflect information about application components, their interactions, and their cloud deployments. We combine push-based heartbeat monitoring with event processing, and graph grammars for efficiently updating those models. An empirical evaluation based on a prototypical implementation applied to Amazon EC2 and the CoCoME case study indicates that the runtime model approach accurately and efficiently reflects changes of cloud applications.},
address = {New York, NY, USA},
author = {Schmieders, Eric and Metzger, Andreas and Pohl, Klaus},
booktitle = {ICSE Workshop on Principles of Engineering Service Oriented Systems},
doi = {10.1109/PESOS.2015.11},
isbn = {9781479919345},
issn = {2156793X},
keywords = {adaptation,automatization,cloud,iobserve,layer,model,terminology},
mendeley-tags = {iobserve},
pages = {17--23},
publisher = {ACM},
series = {{\{}PESOS{\}} 2015},
title = {{Architectural runtime models for privacy checks of cloud applications}},
volume = {2015-July},
year = {2015}
}
Powered by bibtexbrowser