Security-aware elasticity for NoSQL databases in multi-cloud environments. (2017)

• Record Type: Journal Article
• Authors: Naskos, Athanasios; Gounaris, Anastasios; Mouratidis, Haralambos; Katsaros, Panagiotis
• Is Part Of: International journal of intelligent information and database systems. Volume 10:Number 3/4(2017)
• Page Start: 168
• Page End: 190
• Publication Date: 2017
• Subjects: security-aware elasticity -- horizontal scaling -- multi-clouds; Database management -- Computer programs -- Periodicals; Information retrieval -- Computer programs -- Periodicals; Information storage and retrieval systems -- Computer programs -- Periodicals; Artificial intelligence -- Periodicals; Expert systems (Computer science) -- Periodicals; Intelligent agents (Computer software) -- Periodicals; 006.33
• Languages: English
• ISSNs: 1751-5858

Abstract

We focus on horizontally scaling NoSQL databases in a cloud environment, in order to meet performance requirements while respecting security constraints. The performance requirements refer to strict latency limits on the query response time. The security requirements are derived from the need to address two specific kinds of threats that exist in cloud databases, namely data leakage, mainly due to malicious activities of actors hosted on the same physical machine, and data loss after one or more node failures. A key feature of our approach is that we account for multiple cloud providers offering resources of different characteristics. We explain that usually there is a trade-off between performance and security requirements and we derive a model checking approach to drive runtime decisions that strike a user-defined balance between them taking into account the infrastructure heterogeneity. Finally, we evaluate our proposal using real traces to prove the effectiveness in configuring the trade-offs.