A legal and technical perspective on secure cloud storage

MÜLLER, Paul, ed. and others. 5. DFN-Forum Kommunikationstechnologien : Verteilte Systeme im Wissenschaftsbereich ; 21.05.-22.05.2012 in Regensburg ; [Beiträge der Fachtagung]. Bonn: Ges. für Informatik, 2012, pp. 63-72. ISBN 978-3-88579-297-0

Zusammenfassung

Public cloud infrastructures represent alluring storage platforms supporting easy and flexible, location-independent access to the hosted information without any hassle for maintaining own infrastructures.
Already widely established and utilized by end-users as well as by institutions, the hosting of data on untrusted platforms, containing private and confidential information, generates concerns about the security. Technical measures establishing security rely thereby on the technical applicability. As a consequence, legal regulations must be applied to cover those measures even beyond this technical applicability.
This paper provides an evaluation of technical measures combined with legal aspects representing a guideline for secure cloud storage for end-users as well as for institutions. Based upon current approaches providing secure data storage on a technical level, german laws are applied and discussed to give an overview about correct treatment of even confidential data stored securely in the cloud.
As a result, a set of technical possibilities applied on fixed defined security requirements is presented and discussed. These technical measures are extended by legal aspects which must be provided from the site of the hosting Cloud Service Provider.
The presented combination of the technical and the legal perspective on secure cloud storage enables end-users as well as hosting institutions to store their data securely in the cloud in an accountable and transparent way.

Fachgebiet (DDC)

004 Informatik

Schlagwörter

cloud security, integrity, confidentiality, legal implications

Konferenz

Kommunikationstechnologien : Verteilte Systeme im Wissenschaftsbereich, 21. Mai 2012 - 22. Mai 2012, Regensburg

Zitieren

ISO 690

GRAF, Sebastian, Jörg EISELE, Marcel WALDVOGEL, Marc STRITTMATTER, 2012. A legal and technical perspective on secure cloud storage. Kommunikationstechnologien : Verteilte Systeme im Wissenschaftsbereich. Regensburg, 21. Mai 2012 - 22. Mai 2012. In: MÜLLER, Paul, ed. and others. 5. DFN-Forum Kommunikationstechnologien : Verteilte Systeme im Wissenschaftsbereich ; 21.05.-22.05.2012 in Regensburg ; [Beiträge der Fachtagung]. Bonn: Ges. für Informatik, 2012, pp. 63-72. ISBN 978-3-88579-297-0

BibTex

@inproceedings{Graf2012legal-19238,
  year={2012},
  title={A legal and technical perspective on secure cloud storage},
  isbn={978-3-88579-297-0},
  publisher={Ges. für Informatik},
  address={Bonn},
  booktitle={5. DFN-Forum Kommunikationstechnologien : Verteilte Systeme im Wissenschaftsbereich ; 21.05.-22.05.2012 in Regensburg ; [Beiträge der Fachtagung]},
  pages={63--72},
  editor={Müller, Paul},
  author={Graf, Sebastian and Eisele, Jörg and Waldvogel, Marcel and Strittmatter, Marc}
}

RDF

<rdf:RDF
    xmlns:dcterms="http://purl.org/dc/terms/"
    xmlns:dc="http://purl.org/dc/elements/1.1/"
    xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
    xmlns:bibo="http://purl.org/ontology/bibo/"
    xmlns:dspace="http://digital-repositories.org/ontologies/dspace/0.1.0#"
    xmlns:foaf="http://xmlns.com/foaf/0.1/"
    xmlns:void="http://rdfs.org/ns/void#"
    xmlns:xsd="http://www.w3.org/2001/XMLSchema#" > 
  <rdf:Description rdf:about="https://kops.uni-konstanz.de/server/rdf/resource/123456789/19238">
    <foaf:homepage rdf:resource="http://localhost:8080/"/>
    <dcterms:rights rdf:resource="https://rightsstatements.org/page/InC/1.0/"/>
    <dcterms:isPartOf rdf:resource="https://kops.uni-konstanz.de/server/rdf/resource/123456789/36"/>
    <dcterms:isPartOf rdf:resource="https://kops.uni-konstanz.de/server/rdf/resource/123456789/44"/>
    <dcterms:issued>2012</dcterms:issued>
    <dc:creator>Waldvogel, Marcel</dc:creator>
    <dcterms:bibliographicCitation>First publ. in: 5. DFN-Forum Kommunikationstechnologien : Verteilte Systeme im Wissenschaftsbereich ; 21.05.-22.05.2012 in Regensburg ; [Beiträge der Fachtagung] / Paul Müller... (Hrsg.). - Bonn : Ges. für Informatik, 2012. - S. 63-72. - ISBN 978-3-88579-297-0</dcterms:bibliographicCitation>
    <dspace:isPartOfCollection rdf:resource="https://kops.uni-konstanz.de/server/rdf/resource/123456789/44"/>
    <dcterms:abstract xml:lang="eng">Public cloud infrastructures represent alluring storage platforms supporting easy and flexible, location-independent access to the hosted information without any hassle for maintaining own infrastructures.&lt;br /&gt;Already widely established and utilized by end-users as well as by institutions, the hosting of data on untrusted platforms, containing private and confidential information, generates concerns about the security. Technical measures establishing security rely thereby on the technical applicability. As a consequence, legal regulations must be applied to cover those measures even beyond this technical applicability.&lt;br /&gt;This paper provides an evaluation of technical measures combined with legal aspects representing a guideline for secure cloud storage for end-users as well as for institutions. Based upon current approaches providing secure data storage on a technical level, german laws are applied and discussed to give an overview about correct treatment of even confidential data stored securely in the cloud.&lt;br /&gt;As a result, a set of technical possibilities applied on fixed defined security requirements is presented and discussed. These technical measures are extended by legal aspects which must be provided from the site of the hosting Cloud Service Provider.&lt;br /&gt;The presented combination of the technical and the legal perspective on secure cloud storage enables end-users as well as hosting institutions to store their data securely in the cloud in an accountable and transparent way.</dcterms:abstract>
    <dc:contributor>Eisele, Jörg</dc:contributor>
    <dc:rights>terms-of-use</dc:rights>
    <void:sparqlEndpoint rdf:resource="http://localhost/fuseki/dspace/sparql"/>
    <dspace:isPartOfCollection rdf:resource="https://kops.uni-konstanz.de/server/rdf/resource/123456789/36"/>
    <dc:creator>Strittmatter, Marc</dc:creator>
    <dc:contributor>Strittmatter, Marc</dc:contributor>
    <dc:creator>Graf, Sebastian</dc:creator>
    <dspace:hasBitstream rdf:resource="https://kops.uni-konstanz.de/bitstream/123456789/19238/2/Graf_Cloud%20Storage_conference.pdf"/>
    <dc:creator>Eisele, Jörg</dc:creator>
    <dc:date rdf:datatype="http://www.w3.org/2001/XMLSchema#dateTime">2012-06-14T06:27:44Z</dc:date>
    <dc:contributor>Graf, Sebastian</dc:contributor>
    <dc:contributor>Waldvogel, Marcel</dc:contributor>
    <dc:language>eng</dc:language>
    <dcterms:hasPart rdf:resource="https://kops.uni-konstanz.de/bitstream/123456789/19238/2/Graf_Cloud%20Storage_conference.pdf"/>
    <bibo:uri rdf:resource="http://kops.uni-konstanz.de/handle/123456789/19238"/>
    <dcterms:available rdf:datatype="http://www.w3.org/2001/XMLSchema#dateTime">2012-06-14T06:27:44Z</dcterms:available>
    <dcterms:title>A legal and technical perspective on secure cloud storage</dcterms:title>
  </rdf:Description>
</rdf:RDF>

Universitätsbibliographie

Ja