Clouds Coalition Detection for Business Processes Outsourcing

Companies outsourcing their BP (Business Processes) to the cloud must be sure that sensitive information included in their BP are protected. While there are several existing methods that include splitting the model into a collection of BP fragments before a multi-cloud deployment minimizing therefore the likelihood of a coalition, a risk still remains. We propose in this paper an approach for detecting malicious cloud providers that initiate or participate to a coalition. To do that, we rely on decoy processes having the same structure and number of data as a real process, but with decision strategy making as well as data sets that are completely different (fake) from the real one. Our objective is to detect unexpected exchanges of messages between malicious clouds, that may signify an attempt to initiate or participate to a coalition. The level of reputation of each cloud initiating or joining the coalition will be modified accordingly.