Obfuscating a Business Process by Splitting Its Logic with Fake Fragments for Securing a Multi-cloud Deployment

Amina Ahmed Nacer (1, 2) , Elio Goettelmann (2) , Samir Youcef (2) , Abdelkamel Tari (1) , Claude Godart (2)

1 UB - Université Abderrahmane Mira [Université de Béjaïa] = University Abderrahmane Mira [University of Béjaïa]
2 COAST - Web Scale Trustworthy Collaborative Service Systems

—Companies are ready to outsource their business process to the cloud to enjoy its benefits. However they must be sure that their business know-how is preserved. Although some solutions already exist and consist in splitting the model into a collaboration of BP fragments for a deployment in a muti-cloud context, none of them takes into account the possibility of collusion between the clouds executing the different fragments. To address this issue, we propose in this paper a solution consisting in adding fake BP fragments at specific locations in the process, so as to complicate its structure and hide the direct interaction between clouds executing sensitive fragments. Therefore, the discovery of the process by malicious cloud providers is delayed. The approach is validated against an introduced metric. It demonstrates that our approach is better in the worst case than previous approaches in best cases.

Mots clés: Fake Fragments; Security Risk Management; Cloud Collusion

Domaines: Informatique [cs]

Amina Ahmed Nacer, Elio Goettelmann, Samir Youcef, Abdelkamel Tari, Claude Godart. Obfuscating a Business Process by Splitting Its Logic with Fake Fragments for Securing a Multi-cloud Deployment. IEEE Congress On Services, Jun 2016, SanFrancisco, United States. pp.18 - 25, ⟨10.1109/SERVICES.2016.9⟩. ⟨hal-01399380⟩