Obfuscating a Business Process by Splitting Its Logic with Fake Fragments for Securing a Multi-cloud Deployment

Abstract : —Companies are ready to outsource their business process to the cloud to enjoy its benefits. However they must be sure that their business know-how is preserved. Although some solutions already exist and consist in splitting the model into a collaboration of BP fragments for a deployment in a muti-cloud context, none of them takes into account the possibility of collusion between the clouds executing the different fragments. To address this issue, we propose in this paper a solution consisting in adding fake BP fragments at specific locations in the process, so as to complicate its structure and hide the direct interaction between clouds executing sensitive fragments. Therefore, the discovery of the process by malicious cloud providers is delayed. The approach is validated against an introduced metric. It demonstrates that our approach is better in the worst case than previous approaches in best cases.
Document type :
Conference papers
Complete list of metadatas

Cited literature [22 references]  Display  Hide  Download

https://hal.univ-lorraine.fr/hal-01399380
Contributor : Amina Ahmed Nacer <>
Submitted on : Friday, November 18, 2016 - 5:06:42 PM
Last modification on : Tuesday, December 18, 2018 - 4:26:02 PM
Long-term archiving on : Tuesday, March 21, 2017 - 11:52:27 AM

File

Obfuscating a Business Process...
Files produced by the author(s)

Identifiers

Collections

Citation

Amina Nacer, Elio Goettelmann, Samir Youcef, Abdelkamel Tari, Claude Godart. Obfuscating a Business Process by Splitting Its Logic with Fake Fragments for Securing a Multi-cloud Deployment. IEEE Congress On Services, Jun 2016, SanFrancisco, United States. pp.18 - 25, ⟨10.1109/SERVICES.2016.9⟩. ⟨hal-01399380⟩

Share

Metrics

Record views

526

Files downloads

323