Fraunhofer-Gesellschaft

Publica

Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

On the security of cloud storage services

Sicherheit von Cloud-Speicherdiensten
 
: Borgman, Moritz; Hahn, Tobias; Herfert, Michael; Kunz, Thomas; Richter, Marcel; Viebeg, Ursula; Vowé, Sven
: Waidner, Michael

:
Fulltext urn:nbn:de:0011-n-2093472 (3.2 MByte PDF)
MD5 Fingerprint: 5421ddcba0b92ff0d714ef345dd18601
Created on: 19.10.2012

:

Stuttgart: Fraunhofer Verlag, 2012, 143 pp.
SIT Technical Reports, SIT-TR-2012-001
ISBN: 978-3-8396-0391-8
ISBN: 3-8396-0391-9
English
Study, Electronic Publication
Fraunhofer SIT ()
cloud computing; cloud storage; security; privacy; encryption; confidentiality; outsourcing

Abstract
Cloud storage applications like Mozy, Dropbox, Crashplan and many others are very popular. They offer to store any kind of data in a very reliable way, managed in highly protected data centers by professional administrators. In the pre-cloud era this was a privilege of big companies having a big financial background. Now, this is a new opportunity for private persons and for small and medium companies. They can use cloud storage to syncronize computers, to share data with friends and to realize a backup which is off-premise. The software producers provide easy to install and easy to use applications for the client side. The prices are moderate, in many cases small amounts of storage are even free. Allmost any application claims to be secure. However, in many cases it is not clear what is meant to be secure. The lecture analysis the security requirements of storage services in general and shows concrete securiy characteristics of some of the most important cloud storage applications.

 

Die Studie untersucht einige der bekanntesten Cloud Storage Dienste hinsichtlich Datenschutz und IT-Sicherheit. Es werden existierende Datenschutz-, Sicherheits- und juristische Probleme betrachtet. Hierzu werden zunächst Sicherheitsanforderungen aufgestellt, die für ausreichende Sicherheit zu erfüllen sind. Eine Analyse deckt dann die wichtigsten Schwachstellen auf und zeigt, ob bzw. inwieweit die Dienste diesen Anforderungen genügen.

: http://publica.fraunhofer.de/documents/N-209347.html