Towards Greater Accountability in Cloud Computing through Natural-Language Analysis and Automated Policy Enforcement
Papanikolaou, Nick; Pearson, Siani; Casassa Mont, Marco; Ko, Ryan K L
Keyword(s): cloud; service level agreement; accountability; security
Abstract: We argue in favour of a set of particular tools and approaches to achieve accountability in cloud computing. Our concern is helping cloud providers achieve their security goals and meeting their customers? security and privacy requirements. The techniques we propose in particular include: natural- language analysis (of legislative and regulatory texts, and corporate security rulebooks) and extraction of enforceable rules, use of sticky policies, automated policy enforcement and active monitoring of data, particularly in cloud environments.
External Posting Date: August 6, 2011 [Fulltext]. Approved for External Publication
Internal Posting Date: August 6, 2011 [Fulltext]