Titulo Estágio
A Secure Database as a Service
Áreas de especialidade
Engenharia de Software
Local do Estágio
DEI/CISUC/SSE
Enquadramento
Cloud computing infrastructures use new technologies and services, some of which haven’t been fully evaluated with respect to security. Database as a service (DaaS) is a prime example of a service that’s both exciting and full of difficult security issues.
Several obstacles that have interfered with cloud computing adoption just need a larger perspective. Although many relate to data security in the cloud, we shouldn’t forget that all cloud data must pass through the Internet and its various security technologies just to get to the customer.
Security Solutions for DaaS - a service provider has certain options for implementing the database and its security:
• Encryption
• Key Management
• Authenticity (Integrity and Completeness)
• Other Issues
An unmentioned yet understood amount of security exists when a business hosts its own IT infrastructure. It’s in the machines themselves, the servers used for computation.
Objetivo
We pretend to provide security to DaaS due to the untrustworthiness of service provider, is a basic challenge to have in a cloud computing environment. Having disparate assumptions to solve different aspects of security such as confidentiality and integrity is an obstacle for an integrated secure solution through the combination of existing approaches.
In this project we propose approaches that will concentrate on confidentiality and integrity aspects of DaaS. The proposed approach must preserves data confidentiality and at the same time providing the correctness verifiability of query results for clients.
Plano de Trabalhos - Semestre 1
This work includes the following activities:
(a) [2014-09-01 to 2014-10-31] The review of the state-of-the-art in Database as a service (DaaS) and Security issues;
(b) [2014-11-01 to 2015-01-31] Use case development;
(c) [2014-12-01 to 2015-01-31] Write Thesis Proposal;
Plano de Trabalhos - Semestre 2
(d) [2015-02-01 to 2015-04-30] Proposal of Secure Database as a service (DaaS) for a specific environment;
(e) [2014-11-01 to 2015-04-30] Prototype implementation and experimental validation of the approaches;
(f) [2015-04-01 to 2015-05-31] Write a paper;
(g) [2015-03-01 to 2015-07-31] Write the thesis.
Condições
The work is to be executed at the laboratories of the CISUC’s Software and Systems Engineering Group. A work place will be provided as well as the required computational resources.
Observações
(inserido pelo coordenador do MEI)
Não foi fornecida informação sobre se o estágio é ou não remunerado.
Orientador
Jorge Bernardino, Pedro Furtado
jorge@isec.pt 📩