Towards Greater Accountability in Cloud Computing through Natural-Language Analysis and Automated Policy Enforcement

by Nick Papanikolaou, Siani Pearson, Marco Casassa Mont, Ryan Ko
Abstract:
We argue in favour of a set of particular tools and approaches to achieve accountability in cloud computing. Our concern is helping cloud providers achieve their security goals and meeting their customers’ security and privacy requirements. The techniques we propose in particular include: natural-language analysis (of legislative and regulatory texts, and corporate security rulebooks) and extraction of enforceable rules, use of sticky policies, automated policy enforcement and active monitoring of data, particularly in cloud environments.
Reference:
Towards Greater Accountability in Cloud Computing through Natural-Language Analysis and Automated Policy Enforcement (Nick Papanikolaou, Siani Pearson, Marco Casassa Mont, Ryan Ko), Technical report, HP Laboratories, 2011.
Bibtex Entry:
@TECHREPORT{Papanikolaou2011b,
  author = {Nick Papanikolaou and Siani Pearson and Marco {Casassa Mont} and
	Ryan {Ko}},
  title = {Towards Greater Accountability in Cloud Computing through Natural-Language
	Analysis and Automated Policy Enforcement},
  institution = {HP Laboratories},
  year = {2011},
  type = {HP Labs Technical Report},
  number = {HPL-2011-118},
  __markedentry = {[Nick]},
  abstract = {We argue in favour of a set of particular tools and approaches to
	achieve accountability in cloud computing. Our concern is helping
	cloud providers achieve their security goals and meeting their customers'
	security and privacy requirements. The techniques we propose in particular
	include: natural-language analysis (of legislative and regulatory
	texts, and corporate security rulebooks) and extraction of enforceable
	rules, use of sticky policies, automated policy enforcement and active
	monitoring of data, particularly in cloud environments.},
  owner = {nikos},
  timestamp = {2011.10.30},
  url = {../files/tr2011b.pdf}
}