SECURING PROCESSES FOR OUTSOURCING INTO THE CLOUD

Save this PDF as:

WORD PNG TXT JPG

Größe: px

Ab Seite anzeigen:

Download "SECURING PROCESSES FOR OUTSOURCING INTO THE CLOUD"

Katrin Falk
vor 2 Jahren
Abrufe

Transkript

1 SECURING PROCESSES FOR OUTSOURCING INTO THE CLOUD Sven Wenzel 1, Christian Wessel 1, Thorsten Humberg 2, Jan Jürjens 1,2 1 2 SecGov,

2 Overview Toolsupport: analysis analysis analysis 2

3 Computing Most common definition: The NIST Definition of Computing by Peter Mell, Tim Grance [BSI: Recommendations for Computing Providers] 3

4 s for Small and Medium-sized Enterprises (SMEs) Most significant advantages of cloud computing Flexibility: Less inhouse IT-infrastructure needed Pay-per-use: Overhead costs can be avoided Less effort for infrastructure maintenance Advantages are especially valid for SMEs But: computing is hardly used by SMEs! 4

Concerns regarding Computing I consider Computing as critical due to compliance, security and data privacy issues intransparent and incomparable services incompatible services non-acceptance by

5 Concerns regarding Computing I consider Computing as critical due to compliance, security and data privacy issues intransparent and incomparable services incompatible services non-acceptance by employees technologies not being fully developed yet difficulties integrating with existing services lack of know-how in IT departments Confidentiality Availability [Source: CW market study 2010] Legal regulations have to be met 5

1: analysis First checkup before migrating processes Business processes are assessed for risky elements No consideration of probabilities of occurrence Identification of

6 1: analysis First checkup before migrating processes Business processes are assessed for risky elements No consideration of probabilities of occurrence Identification of risks is a matching on security or compliance standards E.g. BSI basic protection catalogues, ISO norms Various forms of input models: UML, BPMN Semi-formal: Spreadsheets 6

7 analysis: Methodology Input 1. descriptions in various formats Converted into a simplified representation 2. and patterns 2. Patterns analysis searches for relations Output Matching between components and relevant patterns 1. Generic representation 7

8 analysis: Determine matchings Simple method: Text-based matchings Linguistic database Text extraction ~~~~, ~~~, ~~~~, ~~,~~~~~~,~~, ~~~,~~~~~,~~, ~~~~,~~,~~~,~~ Extension ~~~~, ~~~, ~~~~, ~~~, ~~,~~~~~~, ~~, ~~~,~~~~~, ~~, ~~~~,~~, ~~, ~~~,~~ Compare Text extraction ~~~~, ~~~, ~~~~, ~~,~~~~~~,~~, ~~~,~~~~~,~~, ~~~~,~~,~~~,~~ 8

9 analysis: Results For each activity, relevant patterns are identified With a coarse rating of relevance Activity label [Kunde benötigt -Service] Relevante Worte: [Information(200.0), Meldung(200.0), Nachricht(200.0)] Relevante Pattern: BSIGrundschutz_B_5.10 : Internet Information Server (200.0) BSIGrundschutz_G_4.32 : Nichtzustellung einer Nachricht (200.0) Matching BSIGrundschutz_G_5.27 : Nichtanerkennung einer Nachricht (200.0) BSIGrundschutz_M_2.158 : Meldung expressions von Schadprogramm-Infektionen (200.0) (rated) [Dienstleister erhält Serviceanfrage] Relevante Worte: [Dienstleister(500.0)] Relevante Pattern: Identified BSIGrundschutz_G_2.84 : Unzulängliche vertragliche Regelungen mit einem externen Dienstleister (500.0) BSIGrundschutz_M_2.436 : Vernichtung von Datenträgern durch externe Dienstleister (500.0) patterns [Eingabe personenbezogener Daten] Relevante Worte: [Daten(500.0), personenbezogener(500.0), Dateien(200.0), Unterlagen(200.0)] Relevante Pattern: BSIGrundschutz_G_2.61 : Unberechtigte Sammlung personenbezogener Daten (1000.0) BSIGrundschutz_G_2.61 : Unberechtigte Sammlung personenbezogener Daten (1000.0) BSIGrundschutz_G_2.116 : Datenverlust beim Kopieren oder Verschieben von Daten unter Windows Server 2003 (500.0) BSIGrundschutz_G_2.15 : Vertraulichkeitsverlust schutzbedürftiger Daten im Unix-System (500.0) BSIGrundschutz_G_2.24 : Vertraulichkeitsverlust schutzbedürftiger Daten des zu schützenden Netzes (500.0) BSIGrundschutz_G_3.1 : Vertraulichkeits- oder Integritätsverlust von Daten durch Fehlverhalten (500.0) 9

10 2. Analysis: Modelling Outsourcing processes might affect their compliance E.g. server locations matter Models must contain the examined aspects, e.g. role assignments for Separation of Duties (SoD) [Marcel Michel 2011] 10

11 Verification of compliance properties Simple properties can be formulated using Object Constraint Language E.g. Separation of duty context TaskSet inv: self.selectedtasks -> forall(x,y x <> y implies x.performer -> forall(z y.performer -> includes(z) ) ) More complex properties require more advanced techniques E.g. fragments or temporal logic for workflow-based features [](pay -> <> (pickup reclaim)) Automated verification requires detailed descriptions of both the process and the requirements. 11

12 3. Analysis (ongoing) Goal: Reveal security concerns in early design stages es and their distribution are considered Transfer of UMLsec annotations to business process models 12

13 Tool Support CARiSMA Provides checks for the UMLsec profile Plugin for Eclipse Integrates established modeling tools, e.g. Topcased Open Source Ongoing: Implementation of Secures analysis tools 13

Conclusions and Outlook Computing for SMEs Offers economic chances as well as security and compliance concerns The Secures project supports

14 Conclusions and Outlook Computing for SMEs Offers economic chances as well as security and compliance concerns The Secures project supports SMEs in utilizing cloud services Work is still ongoing, especially concerning security analysis and tool support 14

15 Thank you 15

16 Our contribution analysis analysis analysis 16

17 NIST reference architecture 17

Ähnliche Dokumente

Darstellung und Anwendung der Assessmentergebnisse

Darstellung und Anwendung der Assessmentergebnisse Process flow Remarks Role Documents, data, tool input, output Important: Involve as many PZU as possible PZO Start Use appropriate templates for the process documentation Define purpose and scope Define