Towards Secure Dynamic Product Lines in the Cloud

Sebastian Krieter; Jacob Krüger; Nico Weichbrodt; Vasily A. Sartakov; Rüdiger Kapitza; Thomas Leich

doi:10.1145/3183399.3183425

Towards Secure Dynamic Product Lines in the Cloud

Sebastian Krieter, Jacob Krüger, Nico Weichbrodt, Vasily A. Sartakov, Rüdiger Kapitza, Thomas Leich

Engineering of Software-Intensive Systems

Onderzoeksoutput: Hoofdstuk in Boek/Rapport/Congresprocedure › Conferentiebijdrage › Academic › peer review

4 Citaten (Scopus)

Samenvatting

Cloud-based technologies play an increasing role in software engineering because of their scalability, availability, and cost efficiency. However, due to privacy issues, developers and organizations still hesitate to host applications that handle sensitive data on servers of external cloud providers. Modern hardware extensions, such as Intel’s Software Guard Extensions (SGX), are an attempt to provide confidentiality and integrity for applications running on external hardware. Still, enabling SGX in cloud systems poses new challenges considering scalability and flexibility. In this paper, we propose an approach to address these issues by employing concepts from the domain of Dynamic Software Product Lines (DSPLs). We aim to enable applications running on SGX-based cloud systems to be securely reconfigurable and extendable during runtime. In particular, we describe properties that such an approach should fulfill and discuss corresponding challenges.

Originele taal-2	Engels
Titel	International Conference on Software Engineering - New Ideas and Emerging Results (ICSE-NIER)
Uitgeverij	Association for Computing Machinery, Inc
Pagina's	5-8
Aantal pagina's	4
DOI's	https://doi.org/10.1145/3183399.3183425
Status	Gepubliceerd - 2018

Bibliografische nota

DBLP License: DBLP's bibliographic metadata records provided through http://dblp.org/ are distributed under a Creative Commons CC0 1.0 Universal Public Domain Dedication. Although the bibliographic metadata records are provided consistent with CC0 1.0 Dedication, the content described by the metadata records is not. Content may be subject to copyright, rights of privacy, rights of publicity and other restrictions.

Toegang tot document

10.1145/3183399.3183425

Citeer dit

@inproceedings{eb0c14eb64e34b40b83ff8fa52412591,

title = "Towards Secure Dynamic Product Lines in the Cloud",

abstract = "Cloud-based technologies play an increasing role in software engineering because of their scalability, availability, and cost efficiency. However, due to privacy issues, developers and organizations still hesitate to host applications that handle sensitive data on servers of external cloud providers. Modern hardware extensions, such as Intel{\textquoteright}s Software Guard Extensions (SGX), are an attempt to provide confidentiality and integrity for applications running on external hardware. Still, enabling SGX in cloud systems poses new challenges considering scalability and flexibility. In this paper, we propose an approach to address these issues by employing concepts from the domain of Dynamic Software Product Lines (DSPLs). We aim to enable applications running on SGX-based cloud systems to be securely reconfigurable and extendable during runtime. In particular, we describe properties that such an approach should fulfill and discuss corresponding challenges.",

keywords = "Cloud computing, SGX, Software product line, Security",

author = "Sebastian Krieter and Jacob Kr{\"u}ger and Nico Weichbrodt and Sartakov, {Vasily A.} and R{\"u}diger Kapitza and Thomas Leich",

note = "DBLP License: DBLP's bibliographic metadata records provided through http://dblp.org/ are distributed under a Creative Commons CC0 1.0 Universal Public Domain Dedication. Although the bibliographic metadata records are provided consistent with CC0 1.0 Dedication, the content described by the metadata records is not. Content may be subject to copyright, rights of privacy, rights of publicity and other restrictions.",

year = "2018",

doi = "10.1145/3183399.3183425",

language = "English",

pages = "5--8",

booktitle = "International Conference on Software Engineering - New Ideas and Emerging Results (ICSE-NIER)",

publisher = "Association for Computing Machinery, Inc",

address = "United States",

}

Towards Secure Dynamic Product Lines in the Cloud. / Krieter, Sebastian; Krüger, Jacob; Weichbrodt, Nico et al.
International Conference on Software Engineering - New Ideas and Emerging Results (ICSE-NIER). Association for Computing Machinery, Inc, 2018. blz. 5-8.

Onderzoeksoutput: Hoofdstuk in Boek/Rapport/Congresprocedure › Conferentiebijdrage › Academic › peer review

TY - GEN

T1 - Towards Secure Dynamic Product Lines in the Cloud

AU - Krieter, Sebastian

AU - Krüger, Jacob

AU - Weichbrodt, Nico

AU - Sartakov, Vasily A.

AU - Kapitza, Rüdiger

AU - Leich, Thomas

N1 - DBLP License: DBLP's bibliographic metadata records provided through http://dblp.org/ are distributed under a Creative Commons CC0 1.0 Universal Public Domain Dedication. Although the bibliographic metadata records are provided consistent with CC0 1.0 Dedication, the content described by the metadata records is not. Content may be subject to copyright, rights of privacy, rights of publicity and other restrictions.

PY - 2018

Y1 - 2018

N2 - Cloud-based technologies play an increasing role in software engineering because of their scalability, availability, and cost efficiency. However, due to privacy issues, developers and organizations still hesitate to host applications that handle sensitive data on servers of external cloud providers. Modern hardware extensions, such as Intel’s Software Guard Extensions (SGX), are an attempt to provide confidentiality and integrity for applications running on external hardware. Still, enabling SGX in cloud systems poses new challenges considering scalability and flexibility. In this paper, we propose an approach to address these issues by employing concepts from the domain of Dynamic Software Product Lines (DSPLs). We aim to enable applications running on SGX-based cloud systems to be securely reconfigurable and extendable during runtime. In particular, we describe properties that such an approach should fulfill and discuss corresponding challenges.

AB - Cloud-based technologies play an increasing role in software engineering because of their scalability, availability, and cost efficiency. However, due to privacy issues, developers and organizations still hesitate to host applications that handle sensitive data on servers of external cloud providers. Modern hardware extensions, such as Intel’s Software Guard Extensions (SGX), are an attempt to provide confidentiality and integrity for applications running on external hardware. Still, enabling SGX in cloud systems poses new challenges considering scalability and flexibility. In this paper, we propose an approach to address these issues by employing concepts from the domain of Dynamic Software Product Lines (DSPLs). We aim to enable applications running on SGX-based cloud systems to be securely reconfigurable and extendable during runtime. In particular, we describe properties that such an approach should fulfill and discuss corresponding challenges.

KW - Cloud computing

KW - SGX

KW - Software product line

KW - Security

U2 - 10.1145/3183399.3183425

DO - 10.1145/3183399.3183425

M3 - Conference contribution

SP - 5

EP - 8

BT - International Conference on Software Engineering - New Ideas and Emerging Results (ICSE-NIER)

PB - Association for Computing Machinery, Inc

ER -

Towards Secure Dynamic Product Lines in the Cloud

Samenvatting

Bibliografische nota

Toegang tot document

Vingerafdruk

Citeer dit