@article{JunghannsFabianErmakova2016, author = {Junghanns, Philipp and Fabian, Benjamin and Ermakova, Tatiana}, title = {Engineering of secure multi-cloud storage}, series = {Computers in industry : an international, application oriented research journal}, volume = {83}, journal = {Computers in industry : an international, application oriented research journal}, publisher = {Elsevier}, address = {Amsterdam}, issn = {0166-3615}, doi = {10.1016/j.compind.2016.09.001}, pages = {108 -- 120}, year = {2016}, abstract = {This article addresses security and privacy issues associated with storing data in public cloud services. It presents an architecture based on a novel secure cloud gateway that allows client systems to store sensitive data in a semi-trusted multi-cloud environment while providing confidentiality, integrity, and availability of data. This proxy system implements a space-efficient, computationally-secure threshold secret sharing scheme to store shares of a secret in several distinct cloud datastores. Moreover, the system integrates a comprehensive set of security measures and cryptographic protocols to mitigate threats induced by cloud computing. Performance in practice and code quality of the implementation are analyzed in extensive experiments and measurements. (C) 2016 Elsevier B.V. All rights reserved.}, language = {en} } @article{MeyerPufahlBatoulisetal.2015, author = {Meyer, Andreas and Pufahl, Luise and Batoulis, Kimon and Fahland, Dirk and Weske, Mathias}, title = {Automating data exchange in process choreographies}, series = {Information systems}, volume = {53}, journal = {Information systems}, publisher = {Elsevier}, address = {Oxford}, issn = {0306-4379}, doi = {10.1016/j.is.2015.03.008}, pages = {296 -- 329}, year = {2015}, abstract = {Communication between organizations is formalized as process choreographies in daily business. While the correct ordering of exchanged messages can be modeled and enacted with current choreography techniques, no approach exists to describe and automate the exchange of data between processes in a choreography using messages. This paper describes an entirely model-driven approach for BPMN introducing a few concepts that suffice to model data retrieval, data transformation, message exchange, and correlation four aspects of data exchange. For automation, this work utilizes a recent concept to enact data dependencies in internal processes. We present a modeling guideline to derive local process models from a given choreography; their operational semantics allows to correctly enact the entire choreography from the derived models only including the exchange of data. Targeting on successful interactions, we discuss means to ensure correct process choreography modeling. Finally, we implemented our approach by extending the camunda BPM platform with our approach and show its feasibility by realizing all service interaction patterns using only model-based concepts. (C) 2015 Elsevier Ltd. All rights reserved.}, language = {en} }