Policing as a Service in the Cloud

ABSTRACT

Security and privacy are fundamental concerns in cloud computing both in terms of legal complications and user trust. Cloud computing is a new computing paradigm, aiming to provide reliable, customized, and guaranteed computing dynamic environment for end users. However, the existing security and privacy issues in the cloud still present a strong barrier for users to adopt cloud computing solutions. This paper investigates the security and privacy challenges in cloud computing in order to explore methods that improve the users’ trust in the adaptation of the cloud. Policing as a Service can be offered by the cloud providers with the intention of empowering users to monitor and guard their assets in the cloud. This service is beneficial both to the cloud providers and the users. However, at first, the cloud providers may only be able to offer basic auditing services due to undeveloped tools and applications. Similar to other services delivered in the cloud, users can purchase this service to gain some control over their data. The subservices of the proposed service can be Privacy as a Service and Forensics as a Service. These services give users a sense of transparency and control over their data in the cloud while better security and privacy safeguards are sought.

KEYWORDS:

• cloud computing
• cloud computing security
• confidentiality
• data protection
• data security
• multi-jurisdiction
• policing
• privacy
• trust

Additional information

Notes on contributors

Shahrzad A. Zargari

Shahrzad A. Zargari studied Forensics Computing and Security at the University of Derby and has published at peer-reviewed international conferences in applied statistics, digital forensics, and network security. She is an experienced researcher who has been involved with the information technology industry for more than 15 years. Zargari has developed a passion for digital forensics and network security. In the last few years, she has employed her background knowledge in applied statistics to computer security. At the moment, her research topics involve cloud forensics, data mining, cyber crime, and network security. She is currently teaching information security at Sheffield Hallam University.

Anthony Smith

Anthony Smith has been involved with many aspects of academia since 2002, from developing individual modules through to reviewing whole portfolios of degrees. He was responsible for a recent review of all the MSc students at the Distributed and Intelligent Research Centre, University of Derby, and the development of new MSc programs. Last year, the BSc moved from Computing to Computer Science and he looked after the Networks and Security Program. Smith has sat on a number of internal validation panels for other faculties and external panels for Southampton and East London Universities. Also, he is an external examiner at Coventry University and the M.S. Ramaiah School of Advanced Studies Bangalore in India. Prior to 2002, he worked as an embedded systems designer in a range of areas, where he was involved in the development of 3G phone stacks, scientific instrumentation, near and far infrared analysis instruments, high-speed wrapping machines, and the design and support of alarm and CCTV control systems.