Author Archive

RestAssured Secure Data Processing Demonstration

RestAssured has recently demonstrated an implementation of its research in secure data processing in the cloud, highlighting all major aspects of the project in a demonstrative deployment of a real-world, social care service.

 

The following three and a half minute video explains RestAssured in action, and shows how its technologies can be used to analyse the risk of a proposed deployment, protect sensitive data-in-use, and monitor and adapt a running system when a change occurs to the initial deployment conditions that can threaten the secure operation of the cloud-based service.

 

The video can also be downloaded here

RestAssured showcased at German Innovation Forum

Supported by the German Ministry for Education and Research, the University of Duisburg-Essen hosted the German Innovation Forum “Innovation interaktiv!” from 5-6 July 2018. The Forum addresses small and medium enterprises (SME) to help those bringing innovations to market.

 

Dr. Andreas Metzger (paluno, the Ruhr Institute for Software Technology of the University of Duisburg-Essen) chaired a session on digital transformation and data protection. In his role as chief architect of RestAssured, he showcased the project’s ambition, innovation pillars and high-level technical architecture.

 

The discussions during the session clearly indicated that secure data processing is a key concern for SMEs and novel solutions for data protection in the cloud are key to deliver future digital products and services.

 

Further information about the event (in German only) is available at: https://innovation-interaktiv.de/

RestAssured: Securing Cloud Analytics – SYSTOR 2018

The secure analytics platform used in RestAssured, and developed by partner organisation IBM Research, was presented at the ACM International Systems and Storage Conference (SYSTOR) in June 2018.

 

The accepted poster, “RestAssured: Securing Cloud Analytics”, which details the approach and the associated technologies such as Intel SGX, Apache Spark SQL and Opaque, has been published and can be read here. Below is an except of the poster:

 

“Protecting sensitive business and personal information is a cornerstone requirement when enterprises and organizations move to the cloud. Many aspects of this requirement are already handled at various levels. Data-at-rest can be secured in cloud stores by encrypting it before persisting the data to storage, while data-in-flight is transmitted using protected channels such as TLS and HTTPS. Data-in-use, processed in cloud compute nodes, is the most vulnerable link in the end-to-end information flow, since the process memory can be accessed by malicious privileged software or system administrators.

….

Our team has designed and developed a framework for trust management in SGX enclaves that performs verification (remote attestation) of the enclave hardware and software components, and assists in trusted delivery of secrets (such as data encryption keys) to the enclaves.”

 

Additionally, the full list of accepted posters can be found on the SYSTOR site here.

 

The slide below was presented during the conference along side the official poster above:

 

 

RestAssured: Securing Cloud Analytics

Adaptant Signs Agreement with KnowNow

Adaptant and KnowNow sign agreement for UBI

 

RestAssured consortium member Adaptant has signed an agreement with UK based firm KnowNow Information Ltd, that will bring their user consent management solution for automotive usage-based insurance (UBI), to market.

 

The UBI solution is being developed with RestAssured technology and will give drivers control over their data while the vehicle sends information to the insurance provider.

 

For further details see the original press release from Adaptant here

 

Sources: 1, 2

 

Panel discussion on “Security and Adaptivity”

SEAMS 2018 Security and Adaptivity Panel

 

SEAMS 2018, the 13th International Symposium on Software Engineering for Adaptive and Self-Managing Systems, featured a panel discussion on security and adaptivity.

 

The panel was moderated by Professor David Garlan (Carnegie Mellon University) and included researchers from the University of Kent, Rochester Institute of Technology, and The Open University. RestAssured was represented in the panel by Dr. Zoltan Mann from paluno (The Ruhr Institute for Software Technology), University of Duisburg-Essen.

 

The panel discussed – also with lively participation from the audience – to what extent security poses different challenges to self-adaptive systems than other quality attributes do.

 

The extended abstract with paluno’s position on this topic (authored by Zoltan Mann and Andreas Metzger) can be found here:

www.cs.bme.hu/~mann/publications/SEAMS-2018/Mann_Metzger_SEAMS_2018.pdf.