[Back]

I. Brandic, S. Dustdar, T. Anstett, D. Schumm, F. Leymann, R. Konrad:
"Compliant Cloud Computing (C3): Architecture and Language Support for User-driven Compliance Management in Clouds";
Talk: 3rd International Conference on Cloud Computing (IEEE Cloud 2010), Miami, Florida, USA; 2010-07-05 - 2010-07-10; in: "Proceedings of the 3rd International Conference on Cloud Computing (IEEE Cloud 2010)", IEEE Computer Society, (2010), ISBN: 978-0-7695-4130-3; 244 - 251.

Cloud computing represents a promising
computing paradigm, where computational power is
provided similar to utilities like water, electricity or gas.
While most of the Cloud providers can guarantee some
measurable non-functional performance metrics e.g.,
service availability or throughput, there is lack of adequate
mechanisms for guaranteeing certifiable and auditable
security, trust, and privacy of the applications and the data
they process. This lack represents an obstacle for moving
most business relevant applications into the Cloud. In this
paper we devise a novel approach for compliance
management in Clouds, which we termed Compliant
Cloud Computing (C3). On one hand, we propose novel
languages for specifying compliance requirements
concerning security, privacy, and trust by leveraging
domain specific languages and compliance level
agreements. On the other hand, we propose the C3
middleware responsible for the deployment of certifiable
and auditable applications, for provider selection in
compliance with the user requirements, and for enactment
and enforcement of compliance level agreements. We
underpin our approach with a use case discussing various
techniques necessary for achieving security, privacy, and
trust in Clouds as for example data fragmentation among
different protection domains or among different
geographical regions.

Compliance managmenet; SLAs; DSLs;

http://dx.doi.org/10.1109/CLOUD.2010.42

Project Head Ivona Brandic:
Foundations of Self-governing ICT Infrastructures

Project Head Schahram Dustdar:
Compliance-driven Models, Languages, and Architectures for Services