SecureCloud Presentation at EUBrasilCloudFORUM concertation meeting, in RIo de Janeiro (Brasil) at 18th March 2016

1. Session 1: EU-Brazil ICT
collaboration today
Andrey Brito, UFCG
SecureCloud
Secure Big Data Processing in Untrusted Clouds
18/03/2016 SecureCloud 1

2. SecureCloud – Objective & focus
The goal of SecureCloud is to ensure confidentiality,
integrity, consistency and availability of applications
in the cloud.
It focus on the following areas:
• Technologies for secure computation
• Cloud Services for IaaS and PaaS
• Smart Grid applications
• QoS for stream processing applications
18/03/2016 SecureCloud 2

3. SecureCloud – Expected results
• Create new service options for cloud computing users
• Create applications for industrial partners (in smart grid
scenarios) that highlight the potential exploitability and serve as
reference architectures for applications
• Create SDKs for cloud-native trusted computing (e.g., Intel SGX)
• Create software for managing secure containers in the most used
platform for cloud computing
• Enable novel applications that rely on highly sensitive data to be
built
• Transfer technology between research institutions and companies
in the area of cloud computing
18/03/2016 SecureCloud 3

4. Exploitable background
18/03/2016 SecureCloud 4
Name of the
assets
Short Description Exploitation plans Source
SmartGrid
Datasets
Anonymized dataset
of smart grid users
and pilot instalations
Validate applications
built to use the secure
cloud providers
LACTEC
COPEL
Trusted
Computing with
SGX
Enable flexibility in
the usage of trusted
comuting
technologies
Low-level support for
the containers to be
managed by
SecureCloud
H2020 Sereca
project
Secure storage Secure storage
techniques without
hardware support
Complement the
storage techniques in
the project
H2020
SafeCloud
Fogbow Lightweight
mechanism for cloud
federation
Extend secure
computations to a
multicloud scenario
H2020 EU-BR
EUBrazilCC

5. SecureCloud & Cloud computing
challenges
• Personal data protection & privacy – Data will be protected
from adversaries (both hackers and malicious employees at
the provider) by hardware capabilities
• Portability of data – Services will be build to interoperate
with existing tools and technologies for big data
• Vendor lock-in – Technologies will be validated in the most
used open-source platform for cloud computing
(OpenStack) and should have standard interfaces for
managing secure containers
• Minimizing adoption obstacles – Guidelines and templates
for building secure applications will be published
18/03/2016 SecureCloud 5

6. Hurdles & recommendations
• Limitations in the technologies for secure
processing may require rethinking big data
programming models for building scalable & secure
applications
• Policies that enforce application developers to
handle personal data adequately should be in place
in Brazil
• Application developers and their users should be
aware of the risks when data is not handled in a
secure and privacy-friendly way
18/03/2016 SecureCloud 6