Ho An

Followers

Following

Public Views

Lars Grunske

Universität Stuttgart

Giordano Tamburrelli

Ratneshwer Gupta

Jawaharlal Nehru University

Raffaela Mirandola

Politecnico di Milano

Gabriele Tolomei

Università Ca' Foscari Venezia

Ita Richardson

Manuel Carro

Universidad Politécnica de Madrid

Chaman Wijesiriwardana

Dr. Sonam Seth

Bundelkhand University, JHANSI

reza asemi

Interests

Uploads

Papers by Ho An

Confidentiality protection of user data and adaptive resource allocation for managing multiple workflow performance in service-based systems

In this dissertation, two interrelated problems of service-based systems (SBS) are addressed: pro... more In this dissertation, two interrelated problems of service-based systems (SBS) are addressed: protecting users' data confidentiality from service providers, and managing performance of multiple workflows in SBS. Current SBSs pose serious limitations to protecting users' data confidentiality. Since users' sensitive data is sent in unencrypted forms to remote machines owned and operated by third-party service providers, there are risks of unauthorized use of the users' sensitive data by service providers. Although there are many techniques for protecting users' data from outside attackers, currently there is no effective way to protect users' sensitive data from service providers. In this dissertation, an approach is presented to protecting the confidentiality of users' data from service providers, and ensuring that service providers cannot collect users' confidential data while the data is processed or stored in cloud computing systems. The approach ha...

Download

Confidentiality Protection in Cloud Computing Systems

An Adaptive Tradeoff Model for Service Performance and Security in Service-Based Systems

2009 IEEE International Conference on Web Services, 2009

Abstract The message-based communication among services in Service Oriented Architecture (SOA) is... more

Adaptive resource allocation for service-based systems

Proceedings of the First Asia-Pacific Symposium on Internetware, 2009

Due to its major advantages, service-oriented architecture (SOA) has been adopted in various dist... more Due to its major advantages, service-oriented architecture (SOA) has been adopted in various distributed systems, such as web services, grid computing systems, utility computing systems and cloud computing systems. These systems are referred as service-based systems (SBS). In order to effectively use these systems in various applications, one major challenge which must be addressed is to manage the quality of services (QoS) to satisfy users' requirements. In SBS, multiple services are often hosted by the same server and compete for the limited system resources of the server, such as CPU-time, memory and network bandwidth. In addition, service compositions, resource status of servers, workflow priorities and QoS requirements are usually dynamically changing in runtime. Hence, it is necessary to have effective techniques to allocate the system resources to each service provided by a server in order to satisfy the QoS requirements of multiple workflows in SBS. In this paper, a resource allocation approach is presented to adaptively allocating the system resources of servers to their services in runtime in order to satisfy one of the most important QoS requirements, the throughput, of multiple workflows in SBS.

Download

Protection of users' data confidentiality in cloud computing

Proceedings of the Second Asia-Pacific Symposium on Internetware, 2010

ABSTRACT Current cloud computing systems pose serious limitation to protecting users&#39; dat... more ABSTRACT Current cloud computing systems pose serious limitation to protecting users&#39; data confidentiality. Since users&#39; sensitive data is presented in unencrypted forms to remote machines owned and operated by third party service providers, the risks of unauthorized disclosure of the users&#39; sensitive data by service providers may be quite high. There are many techniques for protecting users&#39; data from outside attackers, but currently no effective way is available for protecting users&#39; sensitive data from service providers in cloud computing. In this paper, an approach is presented to protecting the confidentiality of users&#39; data from service providers, and ensures service providers cannot collect users&#39; confidential data while the data is processed and stored in cloud computing systems. Our approach has three major aspects: (1) separating software service providers and infrastructure service providers in cloud computing, (2) hiding information about the owners of data, and (3) data obfuscation. An example to show how our approach can protect the confidentiality of users&#39; data from service providers in cloud computing is given.

An Adaptive Model for Tradeoff between Service Performance and Security in Service-based Environments

Proc. of Int'l Conf. on Web Services, 2009

The messages-based communication among services in Service Oriented Architecture (SOA) is vulnera... more

An Adaptive Approach to Optimizing Tradeoff Between Service Performance and Security in Service-Based Systems

International Journal of Web Services Research, 2011

The message-based communication among services in Service-based Systems (SBS) is vulnerable to va... more The message-based communication among services in Service-based Systems (SBS) is vulnerable to various security attacks and must be well protected by security mechanisms, which may affect performance due to available system resources. In this paper, an adaptive approach is presented to optimize the tradeoff between service performance and security according to SBS users’ requirements and preferences on performance and security. This adaptive approach is based on a tradeoff algorithm with quantitative performance and security metrics and the tradeoff objective function. An SBS example with a security service and a traffic service is used to illustrate the approach.

Download

An Approach to Data Confidentiality Protection in Cloud Environments

International Journal of Web Services Research, 2012

In current cloud computing systems, because users’ data is stored and processed by computing syst... more In current cloud computing systems, because users’ data is stored and processed by computing systems managed and operated by various service providers, users are concerned with the risks of unauthorized usage of their sensitive data by various entities, including service providers. The current cloud computing systems protect users’ data confidentiality from all entities, except service providers. In this paper, an approach is presented for improving the protection of users’ data confidentiality in cloud computing systems from all entities, including service providers. The authors’ approach has the following features: (1) separation of cloud application providers, data processing service providers and data storage providers, (2) anonymization of users’ identities, (3) grouping cloud application components and distributing their execution to distinct cloud infrastructures of data processing service providers, and (4) use of data obfuscation and cryptography for protecting the sensitiv...

Download

Dynamic Audit Services for Outsourced Storages in Clouds

IEEE Transactions on Services Computing, 2013

In this paper, we propose a dynamic audit service for verifying the integrity of an untrusted and... more In this paper, we propose a dynamic audit service for verifying the integrity of an untrusted and outsourced storage. Our audit service is constructed based on the techniques, fragment structure, random sampling, and index-hash table, supporting provable updates to outsourced data and timely anomaly detection. In addition, we propose a method based on probabilistic query and periodic verification for improving the performance of audit services. Our experimental results not only validate the effectiveness of our approaches, but also show our audit system verifies the integrity with lower computation overhead and requiring less extra storage for audit metadata.

Download

Software Engineering Meets Services and Cloud Computing

Computer, 2011

computing. In SOSE, a service-oriented architecture (SOA) provides the architectural style, stand... more computing. In SOSE, a service-oriented architecture (SOA) provides the architectural style, standard protocols, and interfaces required for application development, and cloud computing delivers the needed services to users through virtualization and resource pooling. Combining services and cloud computing in a software engineering framework can help application developers and service providers meet the individual challenges of each paradigm. Although SOSE is conceptually promising, its realization will require additional research in software engineering to address the challenges, such as security and quality-ofservice (QoS) management, that arise in services or cloud computing.

Download

Confidentiality protection of user data and adaptive resource allocation for managing multiple workflow performance in service-based systems

Download

Confidentiality Protection in Cloud Computing Systems

An Adaptive Tradeoff Model for Service Performance and Security in Service-Based Systems

2009 IEEE International Conference on Web Services, 2009

Abstract The message-based communication among services in Service Oriented Architecture (SOA) is... more

Adaptive resource allocation for service-based systems

Proceedings of the First Asia-Pacific Symposium on Internetware, 2009

Download

Protection of users' data confidentiality in cloud computing

Proceedings of the Second Asia-Pacific Symposium on Internetware, 2010