On the vulnerabilities of landmark-based data location approaches: threats, solutions, and challenges
Résumé
Nowadays, many companies, administrations, and individuals are outsourcing the storage of their data to largescale Cloud Service Providers (CSPs). Unfortunately, the modern cloud infrastructure virtualization results in the difficulty or the impossibility for data owners to know the location where their data are stored. Data location verification is required due to legal, privacy, and performance constraints. Recently "Where are my data located in the Cloud?" has become a challenge and solutions have been proposed to verify data location. Even in case of the establishment of a strong Service-Level Agreement, which includes an initial guarantee regarding data location, the CSP may then move the data in another location, like another country, in order to cut the costs or for any other reasons. This paper considers landmark-based verification approaches, which are flexible and low cost compared to other location verification approaches. The objective is the identification of vulnerabilities relating to the main proposed landmark-based location verification approaches when malicious CSPs are involved and the proposal of some countermeasures against CSP's attacks. We present, to the best of our knowledge, the most comprehensive literature survey on vulnerabilities of landmark-based data location approaches.
Origine | Fichiers produits par l'(les) auteur(s) |
---|
Loading...