Modeling Data Protection Vulnerabilities of Cloud Systems Using Risk Patterns

Abstract

Ensuring the protection of sensitive data is important for the adoption of cloud services. Cloud systems are becoming increasingly complex and dynamic, leading to various potential scenarios for attackers to get access to sensitive data. To handle such data protection risks, the concept of risk patterns was introduced previously. A risk pattern models a structural fragment of cloud systems that should not appear in the running system because it would lead to high data protection risks. At deployment and at run time, graph pattern matching and dynamic re-configuration methods can be used to ensure that the run-time model of the cloud system contains no instance of the risk patterns. The previous work left it open, however, how and to what extent real data protection vulnerabilities can be modeled in the form of risk patterns. Therefore, this paper focuses on the design of risk patterns based on vulnerabilities described in the literature. Based on an analysis of 87 papers, we determined 45 risk patterns. Our findings (i) demonstrate that risk patterns can indeed capture many of the vulnerabilities described in the cloud literature, (ii) give insight into the typical structure of risk patterns, and (iii) show the limits of the applicability of the risk pattern approach.

A Data Protection Focused Adaptation Engine for Distributed Video Analytics Pipelines

“…Second, it is typically specific to the system domain and underlying infrastructure. Research dealing with risk analysis, e.g., [20]- [23], as a design time activity is related to our work, i.e., it would be needed to identify and model Problematic Configuration Patterns (PCPs) and how to resolve them (see section IV for details on PCPs) as suggested by our approach. Our approach is agnostic to a specific risk analysis approach, therefore it could be seen as complimentary research.…”

RADAR: Data Protection in Cloud-Based Computer Systems at Run Time

“…For instance, Alebrahim et al perform threat analysis based on a model including the physical and virtual entities of a cloud system, its providers and customers, as well as entities like legislators that are indirectly linked to the system [16]. Palm et al use patterns to capture problematic configurations in cloud system models at design time [38].…”

“…In our earlier work, we analyzed the data protection impact of vulnerabilities described in the cloud literature [38].…”