Contributions au déploiement sécurisé de processus métiers dans le cloud

Amina Ahmed Nacer 1, 2
1 COAST - Web Scale Trustworthy Collaborative Service Systems
Inria Nancy - Grand Est, LORIA - NSS - Department of Networks, Systems and Services
Abstract : The fast evolution and development of technologies lead companies to grow faster in order to remain competitive and to offer services which are at the cutting edge of technology, meeting today’s market needs. Indeed, companies that are subject to frequent changes require a high level of flexibility and agility. Business Process Management (BPM) allows them to better manage their processes. Moreover, the emergence of Cloud Computing and all its advantages (flexibility and sharing, optimized cost, guaranteed accessibility... etc) make it particularly attractive. Thus, the combination of these two concepts allows companies to refloat their capital. However, the use of the cloud also implies new requirements in term of security, which stem from its shared environment, and which slow down its widespread adoption. The objective of this thesis consists in proposing concepts and tools that help and guide companies to deploy safely their processes in a cloud environment. A first contribution is an obfuscation algorithm that automates the decomposition and deployment of processes without any human intervention, based on the nature of the fragments. This algorithm limits the rate of information on each cloud through a set of separation constraints, which allow to deploy fragments considered as sensitive on different clouds. The second contribution of this thesis consists in complicating the structure of the process in order to limit the risk of clouds coalition. This is done through the introduction of fake fragments at certain strategic points in the process. The goal is to make generated collaborations more resistant to attacks, and thus reducing the likelihood of coalition. Even if obfuscation and complexification operations protect companies’ know-how during a cloud deployment, a risk remains. In this context, this thesis also proposes a risk model for evaluating and quantifying the security risks to which the process remain exposed after deployment. The purpose of this model is to combine security information with other dimensions of quality of service such as cost, for the selection of optimized configurations. The proposed approaches are implemented and tested through different process configurations. Their validity is verified through a set of metrics, whose objective is to measure the complexity of the processes as well as the remaining risk level after obfuscation
Complete list of metadatas

Cited literature [106 references]  Display  Hide  Download

https://hal.univ-lorraine.fr/tel-02096672
Contributor : Thèses Ul <>
Submitted on : Thursday, April 11, 2019 - 2:53:10 PM
Last modification on : Thursday, May 2, 2019 - 3:44:36 PM

File

DDOC_T_2019_0013_AHMED_NACER.p...
Files produced by the author(s)

Identifiers

  • HAL Id : tel-02096672, version 1

Citation

Amina Ahmed Nacer. Contributions au déploiement sécurisé de processus métiers dans le cloud. Web. Université de Lorraine; Université A. Mira (Bejaïa, Algérie), 2019. Français. ⟨NNT : 2019LORR0013⟩. ⟨tel-02096672⟩

Share

Metrics

Record views

227

Files downloads

272