Obfuscating a Business Process by Splitting Its Logic with Fake Fragments for Securing a Multi-cloud Deployment

Amina Nacer 1, 2 Elio Goettelmann 2 Samir Youcef 2 Abdelkamel Tari 1 Claude Godart 2
2 COAST - Web Scale Trustworthy Collaborative Service Systems
Inria Nancy - Grand Est, LORIA - NSS - Department of Networks, Systems and Services
Abstract : —Companies are ready to outsource their business process to the cloud to enjoy its benefits. However they must be sure that their business know-how is preserved. Although some solutions already exist and consist in splitting the model into a collaboration of BP fragments for a deployment in a muti-cloud context, none of them takes into account the possibility of collusion between the clouds executing the different fragments. To address this issue, we propose in this paper a solution consisting in adding fake BP fragments at specific locations in the process, so as to complicate its structure and hide the direct interaction between clouds executing sensitive fragments. Therefore, the discovery of the process by malicious cloud providers is delayed. The approach is validated against an introduced metric. It demonstrates that our approach is better in the worst case than previous approaches in best cases.
Type de document :
Communication dans un congrès
IEEE Congress On Services, Jun 2016, SanFrancisco, United States. pp.18 - 25, 2016, Services (SERVICES), 2016 IEEE World Congress on. 〈10.1109/SERVICES.2016.9〉
Liste complète des métadonnées

Littérature citée [22 références]  Voir  Masquer  Télécharger

https://hal.univ-lorraine.fr/hal-01399380
Contributeur : Amina Ahmed Nacer <>
Soumis le : vendredi 18 novembre 2016 - 17:06:42
Dernière modification le : jeudi 11 janvier 2018 - 06:27:29
Document(s) archivé(s) le : mardi 21 mars 2017 - 11:52:27

Fichier

Obfuscating a Business Process...
Fichiers produits par l'(les) auteur(s)

Identifiants

Collections

Citation

Amina Nacer, Elio Goettelmann, Samir Youcef, Abdelkamel Tari, Claude Godart. Obfuscating a Business Process by Splitting Its Logic with Fake Fragments for Securing a Multi-cloud Deployment. IEEE Congress On Services, Jun 2016, SanFrancisco, United States. pp.18 - 25, 2016, Services (SERVICES), 2016 IEEE World Congress on. 〈10.1109/SERVICES.2016.9〉. 〈hal-01399380〉

Partager

Métriques

Consultations de la notice

397

Téléchargements de fichiers

140