@inproceedings {Ifip15, title = {A4Cloud Workshop: Accountability in the Cloud}, booktitle = {IFIP Sumer School 2015 on Privacy and Identity Management. Time for a Revolution?}, volume = {476}, year = {2016}, month = {07/2016}, pages = {61-78}, publisher = {AICT Series, Springer}, organization = {AICT Series, Springer}, address = {Edinburgh (United Kingdon)}, author = {Carmen Fernandez-Gago and Siani Pearson and Michela D{\textquoteright}Errico and Rehab Alnemr and Tobias Pulls and Anderson Santana de Oliveira} } @book {1517, title = {Accountability and Security in the Cloud}, series = {Lecture Notes in Computer Science}, volume = {8937}, year = {2015}, author = {Carmen Fernandez-Gago and Massimo Felici} } @incollection {1512, title = {Metrics for Accountability in the Cloud}, booktitle = {Accountability and Security in the Cloud}, volume = {8937}, number = {LNCS Tutorial}, year = {2015}, pages = {129-153}, author = {Carmen Fernandez-Gago and David Nu{\~n}ez} } @incollection {nunez15privacy, title = {Privacy-Preserving Identity Management as a Service}, booktitle = {Accountability and Security in the Cloud}, series = {Lecture Notes in Computer Science}, volume = {8937}, year = {2015}, pages = {114-125}, publisher = {Springer International Publishing}, organization = {Springer International Publishing}, abstract = {

In this paper we tackle the problem of privacy and confidentiality in Identity Management as a Service (IDaaS). The adoption of cloud computing technologies by organizations has fostered the externalization of the identity management processes, shaping the concept of Identity Management as a Service. However, as it has happened to other cloud-based services, the cloud poses serious risks to the users, since they lose the control over their data. As part of this work, we analyze these concerns and present a model for privacy-preserving IDaaS, called BlindIdM, which is designed to provide data privacy protection through the use of cryptographic safeguards.

}, keywords = {Cloud Computing, Cryptography, Identity Management as a Service, privacy}, isbn = {978-3-319-17198-2}, doi = {10.1007/978-3-319-17199-9_5}, url = {http://dx.doi.org/10.1007/978-3-319-17199-9_5}, author = {David Nu{\~n}ez and Isaac Agudo and Javier Lopez}, editor = {Massimo Felici and Carmen Fernandez-Gago} } @inproceedings {1516, title = {Tools for Cloud Accountability: A4Cloud Tutorial}, booktitle = {9th IFIP Summer School on Privacy and Identity Management for the Future Internet in the Age of Globalisation}, volume = {457}, year = {2015}, pages = {219-236}, publisher = {Springer IFIP AICT}, organization = {Springer IFIP AICT}, address = {Patras (Greece)}, abstract = {

Cloud computing is becoming a key IT infrastructure technology being adopted progressively by companies and users. Still, there are issues and uncertainties surrounding its adoption, such as security and how users data is dealt with that require attention from developers, researchers, providers and users. The A4Cloud project tries to help solving the problem of accountability in the cloud by providing tools that support the process of achieving accountability. This paper presents the contents of the first A4Cloud tutorial. These contents include basic concepts and tools developed within the project. In particular, we will review how metrics can aid the accountability process and some of the tools that the A4Cloud project will produce such as the Data Track Tool (DTT) and the Cloud Offering Advisory Tool (COAT).

}, isbn = {978-3-319-18620-7}, issn = {978-3-319-18621-4}, doi = {10.1007/978-3-319-18621-4_15}, author = {Carmen Fernandez-Gago and Vasilis Tountopoulos and Simone Fischer-H{\"u}bner and Rehab Alnemr and David Nu{\~n}ez and Julio Angulo and Tobias Pulls and Theo Koulouris} } @article {moyano2013re, title = {A Framework for Enabling Trust Requirements in Social Cloud Applications}, journal = {Requirements Engineering}, volume = {18}, year = {2013}, month = {Nov 2013}, pages = {321-341}, publisher = {Springer London}, abstract = {

Cloud applications entail the provision of a huge amount of heterogeneous, geographically-distributed resources managed and shared by many different stakeholders who often do not know each other beforehand. This raises numerous security concerns that, if not addressed carefully, might hinder the adoption of this promising computational model. Appropriately dealing with these threats gains special relevance in the social cloud context, where computational resources are provided by the users themselves. We argue that taking trust and reputation requirements into account can leverage security in these scenarios by incorporating the notions of trust relationships and reputation into them. For this reason, we propose a development framework onto which developers can implement trust-aware social cloud applications. Developers can also adapt the framework in order to accommodate their application-specific needs.

}, keywords = {architecture, framework, social cloud, Trust and reputation requirements}, issn = {0947-3602}, doi = {10.1007/s00766-013-0171-x}, author = {Francisco Moyano and Carmen Fernandez-Gago and Javier Lopez} } @inproceedings {nunez2013metamodel, title = {A Metamodel for Measuring Accountability Attributes in the Cloud}, booktitle = {2013 IEEE International Conference on Cloud Computing Technology and Science (CloudCom 2013)}, year = {2013}, month = {12/2013}, pages = {355-362}, publisher = {IEEE}, organization = {IEEE}, address = {Bristol, UK}, abstract = {

Cloud governance, and in particular data governance in the cloud, relies on different technical and organizational practices and procedures, such as policy enforcement, risk management, incident management and remediation. The concept of accountability encompasses such practices, and is essential for enhancing security and trustworthiness in the cloud. Besides this, proper measurement of cloud services, both at a technical and governance level, is a distinctive aspect of the cloud computing model. Hence, a natural problem that arises is how to measure the impact on accountability of the procedures held in practice by organizations that participate in the cloud ecosystem. In this paper, we describe a metamodel for addressing the problem of measuring accountability properties for cloud computing, as discussed and defined by the Cloud Accountability Project (A4Cloud). The goal of this metamodel is to act as a language for describing: (i) accountability properties in terms of actions between entities, and (ii) metrics for measuring the fulfillment of such properties. It also allows the recursive decomposition of properties and metrics, from a high-level and abstract world to a tangible and measurable one. Finally, we illustrate our proposal of the metamodel by modelling the transparency property, and define some metrics for it.

}, isbn = {978-0-7685-5095-4}, doi = {10.1109/CloudCom.2013.53}, author = {David Nu{\~n}ez and Carmen Fernandez-Gago and Siani Pearson and Massimo Felici} }