PaaSword – A Holistic Data Privacy and Security by Design Platform-as-a Service Framework
Security and data privacy concerns impede the wide adoption of enterprise cloud computing. The EU Horizon 2020 project PaaSword addresses these challenges by developing a holistic security and privacy preserving framework.
DATA PRIVACY & SECURITY
PaaSword offers a security by design framework enabling security annotations, transparently in your IDE, transformed into context-aware security policies that enforce access control, cryptographic protection and physical distribution for securing sensitive data.
PaaSword provides encrypted storage and context-aware access control for Platform-as-a-Service. It thereby delivers key components to protected next generation cloud applications against internal and external adversaries.
RESEARCH & INNOVATION
PaaSword is a Horizon 2020 project with ten partners from industry and academia. By maximizing the trust of individuals and corporate customers in the cloud, it is expected to enable European enterprises to unlock valuable business, economic and operational benefits.
Data privacy & security framework / Searchable encryption scheme
The innovative approach for key management maximizes customer´s control over their data with a sophisticated context-aware access control mechanism.
Enterprise security governance
The implementation is supported by new access control mechanisms that incorporate dynamically changing contextual information into access control policies and context-dependent access rights.
Cloud Security Alliance’s / virtual database middleware technologies
Paasword extends the Cloud Security Alliance´s principles by using a technologie which introduces a scalable secure cloud database abstraction layer with data distribution and encryption methods.
Support developers of cloud applications / code annotation techniques
Supporting developers of cloud applications with code annotation techniques helps to secure an appropriate level of protection for the application’s data.
EXPECTED RESULTS AND IMPACT
- Searchable encryption scheme for secure queries
- Reference architecture
- PaaSword holistic framework
- Policy-based access control & context-aware security models
- Policy enforcement middleware
- Dedicated IDE plug-in
- PaaSword demonstrators
PaaSword enables European enterprises to unlock valuable business, economic and operational benefits of migrating to the cloud.