Information and Computer Security · 2019 · 11 citations · 15 references
ComputingComputer ScienceInformation SystemsCloud SecurityCloud StorageStorage SystemsCloud Data ManagementCloud Infrastructure DesignData SecuritySecure Data SharingStorage ManagementStorage SecurityCloud Configuration ManagementData Privacy RequirementsPrivacy RequirementsPrivacy-preserving Cloud StorageSecret StorageSecure Cloud StorageSemi-structured InterviewsUser Requirements Analysis
Purpose The purpose of this paper is to develop a usable configuration management for Archistar, which utilizes secret sharing for redundantly storing data over multiple independent storage clouds in a secure and privacy-friendly manner. Selecting the optimal secret sharing parameters, cloud storage servers and other settings for securely storing the secret data shares, while meeting all of end user’s requirements and other restrictions, is a complex task. In particular, complex trade-offs between different protection goals and legal privacy requirements need to be made. Design/methodology/approach A human-centered design approach with structured interviews and cognitive walkthroughs of user interface mockups with system administrators and other technically skilled users was used. Findings Even technically skilled users have difficulties to adequately select secret sharing parameters and other configuration settings for adequately securing the data to be outsourced. Practical implications Through these automatic settings, not only system administrators but also non-technical users will be able to easily derive suitable configurations. Originality/value The authors present novel human computer interaction (HCI) guidelines for a usable configuration management, which propose to automatically set configuration parameters and to solve trade-offs based on the type of data to be stored in the cloud. Through these automatic settings, not only system administrators but also non-technical users will be able to easily derive suitable configurations.
15
Adi Shamir · Communications of the ACM · 1979 · 13.5K citations · Full text
Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing
Shucheng Yu, Cong Wang, Kui Ren et al. · 2010 · 1.6K citations
Security Challenges for the Public Cloud
Kui Ren, Cong Wang, Qian Wang · IEEE Internet Computing · 2012 · 847 citations
Alysson Bessani, Miguel Correia, Bruno Quaresma et al. · 2011 · 328 citations
Cloud Computing Security: From Single to Multi-clouds
Mohammed A. AlZain, Eric Pardede, Ben Soh et al. · 2012 · 284 citations