Tools for Cloud Accountability: A4Cloud Tutorial

  • Carmen Fernandez-Gago
  • Vasilis Tountopoulos
  • Simone Fischer-Hübner
  • Rehab Alnemr
  • David Nuñez
  • Julio Angulo
  • Tobias Pulls
  • Theo Koulouris
Conference paper
Part of the IFIP Advances in Information and Communication Technology book series (IFIPAICT, volume 457)

Abstract

Cloud computing is becoming a key IT infrastructure technology being adopted progressively by companies and users. Still, there are issues and uncertainties surrounding its adoption, such as security and how users data is dealt with that require attention from developers, researchers, providers and users. The A4Cloud project tries to help solving the problem of accountability in the cloud by providing tools that support the process of achieving accountability. This paper presents the contents of the first A4Cloud tutorial. These contents include basic concepts and tools developed within the project. In particular, we will review how metrics can aid the accountability process and some of the tools that the A4Cloud project will produce such as the Data Track Tool (DTT) and the Cloud Offering Advisory Tool (COAT).

References

  1. 1.
  2. 2.
    Cloud security alliance. cloud control matrix (ccm) v3. https://cloudsecurityalliance.org/research/ccm/
  3. 3.
    The cloud accountability project. http://www.a4cloud.eu/
  4. 4.
    Implementing accountability in the marketplace - a discussion document, accountability phase iii - the madrid project. Centre for Information Policy Leadership (CIPL), November 2011Google Scholar
  5. 5.
    National institute of standards and technology, nist sp 800–53 - security and privacy controls for federal information systems and organizations. revision 4 (2013)Google Scholar
  6. 6.
    Alnemr, R., Pearson, S., Leenes, R., Mhungu, R: Coat: cloud offerings advisory tool. In: IEEE 6th International Conference on Cloud Computing Technology and Science, CloudCom 2014, Singapore, December 2014, pp. 15–18 (2014)Google Scholar
  7. 7.
    Felici, M., Koulouris, T., Pearson, S: Accountability for data governance in cloud ecosystems. In: IEEE 5th International Conference on Cloud Computing Technology and Science, CloudCom 2013, Bristol, United Kingdom, 2–5 December, 2013, vol. 2, pp. 327–332 (2013)Google Scholar
  8. 8.
    Fischer-Hübner, S., Hedbom, H., Wästlund, E.: Trust and assurance HCI. In: Camenisch, J., Fischer-Hübner, S., Rannenberg, K. (eds.) PrimeLife - Privacy and Identity Management for Life in Europe, p. 261. Springer, Heidelberg (2011)Google Scholar
  9. 9.
    Mell, P., Grance, T.: The NIST definition of cloud computing. Technical report SP 800-145 (2011)Google Scholar
  10. 10.
    Nuñez, D., Fernandez-Gago, C., Pearson, S., Felici, M.: A metamodel for measuring accountability attributes in the cloud. In: 2013 IEEE 5th International Conference on Cloud Computing Technology and Science (CloudCom), vol. 1, pp. 355–362. IEEE (2013)Google Scholar
  11. 11.
    Pettersson, J.S., Fischer-Hübner, S., Bergmann, M.: Outlining “Data Track”: privacy-friendly data maintenance for end-users. In: Wojtkowski, W., Wojtkowski, W.G., Zupancic, J., Magyar, G., Knapp, G. (eds.) Advances in Information Systems Development, pp. 215–226. Springer, Heidelberg (2007)Google Scholar
  12. 12.
    Pulls, T., Peeters, R., Wouters, K.: Distributed privacy-preserving transparency logging. In: Workshop on Privacy in the Electronic Society (WPES), Heidelberg, Germany, November 2013, pp. 83–94 (2013)Google Scholar
  13. 13.
    Benghabrit, W., Grall, H., Royer, J-C., Sellami, M., Azraoui, M., Elkhiyaoui, K., Önen, M., Santana De Oliveira, A., Bernsmed, K.: A cloud accountability policy representation framework. In: CLOSER 2014, 4th International Conference on Cloud Computing and Services Science, 3–5 April 2014, Barcelona, Spain (2014). http://www.eurecom.fr/publication/4222
  14. 14.
    Fischer-Hübner, S., Angulo, J., Pulls, T.: How can cloud users be supported in deciding on, tracking and controlling how their data are used? In: Hansen, M., Hoepman, J.-H., Leenes, R., Whitehouse, D. (eds.) Privacy and Identity 2013. IFIP AICT, vol. 421, pp. 77–92. Springer, Heidelberg (2014). http://dx.doi.org/10.1007/978-3-642-55137-6_6 Google Scholar
  15. 15.
    Angulo, J., Fischer-Hübner, S., Pulls, T., Wästlund, E.: Usable transparency with the “Data Track” - a tool for visualising data disclosures. In: SIGCHI Conference on Human Factors in Computing Systems (CHI 2015), Seoul, South Korea (2015). (Work-in-progress track)Google Scholar

Copyright information

© IFIP International Federation for Information Processing 2015

Authors and Affiliations

  • Carmen Fernandez-Gago
    • 1
  • Vasilis Tountopoulos
    • 2
  • Simone Fischer-Hübner
    • 3
  • Rehab Alnemr
    • 4
  • David Nuñez
    • 1
  • Julio Angulo
    • 3
  • Tobias Pulls
    • 3
  • Theo Koulouris
    • 4
  1. 1.Network, Information and Computer Security LabUniversity of MalagaMalagaSpain
  2. 2.Athens Technology Center S.A.Athens, ChalandriGreece
  3. 3.Karlstad UniversityKarlstadSweden
  4. 4.HP LabsBristolUK

Personalised recommendations