Data Distribution and Encryption Modelling for PaaS-enabled Cloud Security

Some of the most valuable business benefits that accompany the cloud adoption cannot be exploited without addressing, first, new data security challenges posed by cloud computing distributed nature. A promising approach for alleviating these risks is to provide a security-by-design framework that will assist cloud application developers in defining appropriate context-driven policies that enhance cloud security at design-time and enforce access control at run-time. This paper discusses a generic and extensible formalism, called Context-aware Security Policy Model that can be tailored to the particular needs of different cloud applications for enhancing the privacy and confidentiality of sensitive data.