Title
QRES: Quantitative Reasoning on Encrypted Security SLAs.
Abstract
While regulators advocate for higher cloud transparency, many Cloud Service Providers (CSPs) often do not provide detailed information regarding their security implementations in their Service Level Agreements (SLAs). In practice, CSPs are hesitant to release detailed information regarding their security posture for security and proprietary reasons. This lack of transparency hinders the adoption of cloud computing by enterprises and individuals. Unless CSPs share information regarding the technical details of their security proceedings and standards, customers cannot verify which cloud provider matched their needs in terms of security and privacy guarantees. To address this problem, we propose QRES, the first system that enables (a) CSPs to disclose detailed information about their offered security services in an encrypted form to ensure data confidentiality, and (b) customers to assess the CSPsu0027 offered security services and find those satisfying their security requirements. Our system preserves each partyu0027s privacy by leveraging a novel evaluation method based on Secure Two Party Computation (2PC) and Searchable Encryption techniques. We implement QRES and highlight its usefulness by applying it to existing standardized SLAs. The real world tests illustrate that the system runs in acceptable time for practical application even when used with a multitude of CSPs. We formally prove the security requirements of the proposed system against a strong realistic adversarial model, using an automated cryptographic protocol verifier.
Year
Venue
Field
2018
arXiv: Cryptography and Security
Service level,Cryptographic protocol,Confidentiality,Computer security,Computer science,Encryption,Implementation,Secure two-party computation,Cloud computing,Qualitative reasoning
DocType
Volume
Citations 
Journal
abs/1804.04426
0
PageRank 
References 
Authors
0.34
13
5
Name
Order
Citations
PageRank
Ahmed Taha1555.06
Spyros Boukoros272.91
Jesus Luna314316.72
Stefan Katzenbeisser41844143.68
Neeraj Suri51040112.91