Ecole d'ingénieur et centre de recherche en Sciences du numérique

Monitoring personal data transfers in the Cloud

Santana de Oliveira, Anderson; Sendor, Jakub; Garaga, Alexander; Jenatton, Kateline

CLOUDCOM 2013, 5th IEEE Conference on Cloud Computing Technology and Service, 2-5 December 2013, Bristol, UK

Cloud computing brings a number of compliance risks to organisations because physical perimeters are not clearly delimited. Many regulations relate to the location of the data processing (and storage), including the EU Data protection directive. A major problem for cloud service consumers, acting as data controllers, is how to demonstrate compliance to data transfer constraints. We address the lack of tools to support accountable data localization and transfer across cloud software, platform and infrastructure services, usually run by data processors. In this paper we design a framework for automating the collection of evidence that obligations with respect to personal data handling are being carried out in what concerns personal data transfers. We experiment our approach in the Open Stack open source IaaS implementation, showing how auditors can verify whether data transfers were compliant.

Document Doi Bibtex

Titre:Monitoring personal data transfers in the Cloud
Département:Sécurité numérique
Eurecom ref:4482
Copyright: © 2013 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.
Bibtex: @inproceedings{EURECOM+4482, doi = {}, year = {2013}, title = {{M}onitoring personal data transfers in the {C}loud}, author = {{S}antana de {O}liveira, {A}nderson and {S}endor, {J}akub and {G}araga, {A}lexander and {J}enatton, {K}ateline}, booktitle = {{CLOUDCOM} 2013, 5th {IEEE} {C}onference on {C}loud {C}omputing {T}echnology and {S}ervice, 2-5 {D}ecember 2013, {B}ristol, {UK}}, address = {{B}ristol, {ROYAUME}-{UNI}}, month = {12}, url = {} }
Voir aussi: