TY - GEN
T1 - Assuring Data Privacy in Cloud Transformations
AU - Kirkham, Tom
AU - Armstrong, Django
AU - Djemame, Karim
AU - Corrales Compagnucci, Marcelo
AU - Kiran, Mariam
AU - Nwankwo, Iheanyi
AU - Jiang, Ming
AU - Forgó, Nikolaus
PY - 2012
Y1 - 2012
N2 - Cloud transformations require dynamic redistribution of resources across cloud infrastructure. From a legal perspective this movement of data from one data processor to another without the explicit consent of the data subject is a threat to data privacy. Levels of assurance and accountability have to be provided from the cloud infrastructure providers to the data subject in order to maintain trust. In cases of Cloud Transformation multiple providers are present and passing accountability down the chain is essential. Existing Service Level Agreements (SLA) and policy based privacy implementations fail to provide the flexibility and accountability needed in establishing these new relationships. By introducing combined risk and privacy assessment alongside SLA negotiation, the legal and data management implications of Cloud Transformation events can be better accounted for. This will better protect the privacy of data subjects and increase confidence and trust in the Cloud computing platform.
AB - Cloud transformations require dynamic redistribution of resources across cloud infrastructure. From a legal perspective this movement of data from one data processor to another without the explicit consent of the data subject is a threat to data privacy. Levels of assurance and accountability have to be provided from the cloud infrastructure providers to the data subject in order to maintain trust. In cases of Cloud Transformation multiple providers are present and passing accountability down the chain is essential. Existing Service Level Agreements (SLA) and policy based privacy implementations fail to provide the flexibility and accountability needed in establishing these new relationships. By introducing combined risk and privacy assessment alongside SLA negotiation, the legal and data management implications of Cloud Transformation events can be better accounted for. This will better protect the privacy of data subjects and increase confidence and trust in the Cloud computing platform.
UR - https://ieeexplore.ieee.org/document/6296092/metrics#metrics
U2 - 10.1109/trustcom.2012.97
DO - 10.1109/trustcom.2012.97
M3 - Article in proceedings
SP - 1063
BT - Proceedings of the 11th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (IEEE TrustCom-12)
PB - IEEE
ER -