FADE:A Secure Overlay Cloud Storage System with Access Control and Assured Deletion Patrick P.C.Lee 1
1 FADE: A Secure Overlay Cloud Storage System with Access Control and Assured Deletion Patrick P. C. Lee
Cloud Storage is Emerging >Cloud storage is now an emerging business model for data outsourcing 天 Individual users Jungle Disk等i Dropbox Enterprises 厚w口 Mobile devices NASDAQ 君治治 SmugMug己 amazon webservices" 888 百面o 2
2 Cloud Storage is Emerging Cloud storage is now an emerging business model for data outsourcing Mobile devices Individual users Enterprises
Case Studies >Smugmug:hosting terabytes of photos since 2006 Savings:USD 500K per year as in 2006 More savings are expected with more photos >NASDAQ:hosting historical market data since 2008 More clients are found on: http://aws.amazon.com/solutions/case-studies/ References: .http://don.blogs.smugmug.com/2006/11/10/amazon-s3-show-me-the-money/ 3 .http://www.infoq.com/articles/nasdaq-case-study-air-and-s3?
3 Case Studies Smugmug: hosting terabytes of photos since 2006 • Savings: USD 500K per year as in 2006 • More savings are expected with more photos NASDAQ: hosting historical market data since 2008 More clients are found on: http://aws.amazon.com/solutions/case-studies/ References: •http://don.blogs.smugmug.com/2006/11/10/amazon-s3-show-me-the-money/ •http://www.infoq.com/articles/nasdaq-case-study-air-and-s3?
Implications of Cloud Storage >Cloud storage will be a cost-saving business solution: Save cost for unused storage Save technical support for data backups Save electric power and maintenance costs for data centers >Yet,as a cloud client,how do we provide security guarantees for our outsourced data? 4
4 Implications of Cloud Storage Cloud storage will be a cost-saving business solution: • Save cost for unused storage • Save technical support for data backups • Save electric power and maintenance costs for data centers Yet, as a cloud client, how do we provide security guarantees for our outsourced data?
Security Challenges >Can we protect outsourced data from improperly accessed? Unauthorized users must not access our data We don't want cloud providers to mine our data for their marketing purposes We need access control: Only authorized parties can access outsourced data 5
5 Security Challenges Can we protect outsourced data from improperly accessed? • Unauthorized users must not access our data • We don’t want cloud providers to mine our data for their marketing purposes We need access control: • Only authorized parties can access outsourced data