Visible to the public Ontological Definition of Governance Framework for Security Policies in Cloud Environments

TitleOntological Definition of Governance Framework for Security Policies in Cloud Environments
Publication TypeConference Paper
Year of Publication2017
AuthorsVeloudis, Simeon, Paraskakis, Iraklis, Petsos, Christos
Conference NameProceedings of the 21st Pan-Hellenic Conference on Informatics
Conference LocationNew York, NY, USA
ISBN Number978-1-4503-5355-7
Keywordscloud computing, Deterence, governance, Human Behavior, Ontologies, OWL 2, Policies, policy, privacy, Privacy Policies, pubcrawl, Scalability, security

The cloud computing paradigm enables enterprises to realise significant cost savings whilst boosting their agility and productivity. However, security and privacy concerns generally deter enterprises from migrating their critical data to the cloud. One way to alleviate these concerns, hence bolster the adoption of cloud computing, is to devise adequate security policies that control the manner in which these data are stored and accessed in the cloud. Nevertheless, for enterprises to entrust these policies, a framework capable of providing assurances about their correctness is required. This work proposes such a framework. In particular, it proposes an approach that enables enterprises to define their own view of what constitutes a correct policy through the formulation of an appropriate set of well-formedness constraints. These constraints are expressed ontologically thus enabling--by virtue of semantic inferencing-- automated reasoning about their satisfaction by the policies.

Citation Keyveloudis_ontological_2017