Security and Privacy of performing Data Analytics in the cloud - A three-way handshake of Technology, Policy, and Management

摘要

Cloud platform came into existence primarily to accelerate IT delivery and topromote innovation. To this point, it has performed largely well to theexpectations of technologists, businesses and customers. The service aspect ofthis technology has paved the road for a faster set up of infrastructure andrelated goals for both startups and established organizations. This has furtherled to quicker delivery of many user-friendly applications to the market whileproving to be a commercially viable option to companies with limited resources.On the technology front, the creation and adoption of this ecosystem hasallowed easy collection of massive data from various sources at one place,where the place is sometimes referred as just the cloud. Efficient data miningcan be performed on raw data to extract potentially useful information, whichwas not possible at this scale before. Targeted advertising is a common examplethat can help businesses. Despite these promising offerings, concerns aroundsecurity and privacy of user information suppressed wider acceptance and anall-encompassing deployment of the cloud platform. In this paper, we discusssecurity and privacy concerns that occur due to data exchanging hands between acloud servicer provider (CSP) and the primary cloud user - the data collector,from the content generator. We offer solutions that encompass technology,policy and sound management of the cloud service asserting that this approachhas the potential to provide a holistic solution.