004 Datenverarbeitung; Informatik
Refine
Year of publication
- 2016 (39) (remove)
Document Type
- Article (13)
- Doctoral Thesis (13)
- Monograph/Edited Volume (8)
- Conference Proceeding (2)
- Postprint (2)
- Preprint (1)
Keywords
- Electronic and spintronic devices (2)
- Semiconductors (2)
- cloud computing (2)
- computer security (2)
- machine learning (2)
- virtual machines (2)
- virtuelle Maschinen (2)
- 3D Drucken (1)
- 3D Semiotik (1)
- 3D Visualisierung (1)
- 3D point clouds (1)
- 3D printing (1)
- 3D semiotics (1)
- 3D visualization (1)
- Abbrecherquote (1)
- Anleitung (1)
- Bachelorstudierende der Informatik (1)
- Bildverarbeitung (1)
- Cloud Computing (1)
- Cloud-Sicherheit (1)
- Cloud-Speicher (1)
- Computer Science (1)
- Computersicherheit (1)
- DDoS (1)
- Deurema Modellierungssprache (1)
- Didaktik der Informatik (1)
- Discrimination Networks (1)
- FRP (1)
- Feedback Loop Modellierung (1)
- Fehlerinjektion (1)
- Fehlertoleranz (1)
- Fitness-distance correlation (1)
- Forschungskolleg (1)
- Forschungsprojekte (1)
- Functional Lenses (1)
- Future SOC Lab (1)
- GPU (1)
- Geodaten (1)
- Graph-basierte Suche (1)
- Hasso Plattner Institute (1)
- Hasso-Plattner-Institut (1)
- Hochschulsystem (1)
- In-Memory Technologie (1)
- In-Memory technology (1)
- In-Memory-Datenbank (1)
- Informatik (1)
- Informatik-Studiengänge (1)
- Informatikvoraussetzungen (1)
- Inkrementelle Graphmustersuche (1)
- Interaktionsmodel (1)
- Internet Security (1)
- Internet-Sicherheit (1)
- Kartografisches Design (1)
- Klassifikation (1)
- Klausurtagung (1)
- Kollaborationen (1)
- LIDAR (1)
- Laser Cutten (1)
- Laufzeitmodelle (1)
- Lehrer (1)
- Live-Programmierung (1)
- Machine Learning (1)
- Malware (1)
- Maschinelles Lernen (1)
- Morphic (1)
- Multicore Architekturen (1)
- Nested Graph Conditions (1)
- Newspeak (1)
- Nichtfotorealistische Bildsynthese (1)
- Ph.D. retreat (1)
- Point-based rendering (1)
- Probleme in der Studie (1)
- Professoren (1)
- Programmierung (1)
- Ressourcenoptimierung (1)
- Runtime analysis (1)
- Sammlungsdatentypen (1)
- Satisfiability (1)
- Service-oriented Systems Engineering (1)
- Software-Testen (1)
- Sozialen Medien (1)
- Spam (1)
- Spam-Erkennung (1)
- Spam-Filtering (1)
- Speicheroptimierungen (1)
- Stilisierung (1)
- Studentenerwartungen (1)
- Studentenhaltungen (1)
- Synchronisation (1)
- Systeme von Systemen (1)
- Theoretischen Vorlesungen (1)
- Universität Bagdad (1)
- Universität Potsdam (1)
- Universitätseinstellungen (1)
- Unveränderlichkeit (1)
- Verlässlichkeit (1)
- Verteilungsalgorithmus (1)
- Virtualisierung (1)
- Visualization (1)
- Vorhersage (1)
- Wirtschaftsinformatik (1)
- Zugriffskontrolle (1)
- access control (1)
- adaptive Systeme (1)
- adaptive systems (1)
- artifical intelligence (1)
- big data services (1)
- business informatics (1)
- cartographic design (1)
- changing the study field (1)
- changing the university (1)
- collaborations (1)
- collection types (1)
- combined task and motion planning (1)
- computer science education (1)
- data center management (1)
- dependability (1)
- deurema modeling language (1)
- direct manipulation (1)
- direkte Manipulation (1)
- discrimination networks (1)
- dropout (1)
- dynamic typing (1)
- dynamic programming languages (1)
- dynamische Programmiersprachen (1)
- dynamische Sprachen (1)
- email spam detection (1)
- fault injection (1)
- fault tolerance (1)
- feedback loop modeling (1)
- functional lenses (1)
- functional programming (1)
- funktionale Programmierung (1)
- geospatial data (1)
- graph queries (1)
- higher education (1)
- human computer interaction (1)
- image processing (1)
- immutable values (1)
- incremental graph pattern matching (1)
- künstliche Intelligenz (1)
- live programming (1)
- malware detection (1)
- manipulation planning (1)
- maschinelles Lernen (1)
- maschninelles Lernen (1)
- memory optimization (1)
- morphic (1)
- multicore architectures (1)
- nested graph conditions (1)
- non-photorealistic rendering (1)
- pattern recognition (1)
- professors (1)
- reactive (1)
- reaktive Programmierung (1)
- research projects (1)
- research school (1)
- runtime models (1)
- service-oriented systems engineering (1)
- software testing (1)
- structured output prediction (1)
- strukturierte Vorhersage (1)
- study problems (1)
- stylization (1)
- synchronization (1)
- systems of systems (1)
- teachers (1)
- tutorial section (1)
- zuverlässigen Datenverarbeitung (1)
Software-as-a-Service (SaaS) offers several advantages to both service providers and users. Service providers can benefit from the reduction of Total Cost of Ownership (TCO), better scalability, and better resource utilization. On the other hand, users can use the service anywhere and anytime, and minimize upfront investment by following the pay-as-you-go model. Despite the benefits of SaaS, users still have concerns about the security and privacy of their data. Due to the nature of SaaS and the Cloud in general, the data and the computation are beyond the users' control, and hence data security becomes a vital factor in this new paradigm. Furthermore, in multi-tenant SaaS applications, the tenants become more concerned about the confidentiality of their data since several tenants are co-located onto a shared infrastructure.
To address those concerns, we start protecting the data from the provisioning process by controlling how tenants are being placed in the infrastructure. We present a resource allocation algorithm designed to minimize the risk of co-resident tenants called SecPlace. It enables the SaaS provider to control the resource (i.e., database instance) allocation process while taking into account the security of tenants as a requirement.
Due to the design principles of the multi-tenancy model, tenants follow some degree of sharing on both application and infrastructure levels. Thus, strong security-isolation should be present. Therefore, we develop SignedQuery, a technique that prevents one tenant from accessing others' data. We use the Signing Concept to create a signature that is used to sign the tenant's request, then the server can verifies the signature and recognizes the requesting tenant, and hence ensures that the data to be accessed is belonging to the legitimate tenant.
Finally, Data confidentiality remains a critical concern due to the fact that data in the Cloud is out of users' premises, and hence beyond their control. Cryptography is increasingly proposed as a potential approach to address such a challenge. Therefore, we present SecureDB, a system designed to run SQL-based applications over an encrypted database. SecureDB captures the schema design and analyzes it to understand the internal structure of the data (i.e., relationships between the tables and their attributes). Moreover, we determine the appropriate partialhomomorphic encryption scheme for each attribute where computation is possible even when the data is encrypted.
To evaluate our work, we conduct extensive experiments with di↵erent settings. The main use case in our work is a popular open source HRM application, called OrangeHRM. The results show that our multi-layered approach is practical, provides enhanced security and isolation among tenants, and have a moderate complexity in terms of processing encrypted data.