PrivacyAware Job Submission in the Cloud The services offered by cloud computing are provided to individuals and organizations by varied shared resources which are forming the hardware layer of cloud data centers. Cloud users do not deal or interact directly with those resources, instead, they deal with the virtualized version of them, in other words, users deal with the virtualization layer which conceals to a great extent the specifics of the physical hardware layer. Based on the virtualization concept, more than one virtual machine can be cohosted on the same physical machine. In spite of the wide range of benefits, cohosting virtual machines on the same host comes with privacy and security threats. From one side, cloud providers are serving the virtual machines without being aware of their contents. On the other side, once cloud users submit their jobs to be serviced in the cloud, they lose their control on their jobsxe2x80x99 sensitive information. Thus, cloud usersxe2x80x99 hesitation from moving to the cloud is logical since their sensitive jobsxe2x80x99 content leakage or misuse is possible, especially when cloud services are not designed with privacy considerations. This paper proposes an approach to make the jobs with sensitive information more secure when submitted to the cloud environment. The core idea of the approach is to request the inclusion of the privacy specification of a set of one or more provider services in the Service Level Agreement contract.

Vallum: Privacy, Confidentiality and Access Controlfor Sensitive Data in Cloud Environments Managing sensitive data in shared environments such as public clouds is an enduring challenge. While several approaches exist to protect data at rest such as endtoend encryption, there exist only a few solutions such as homomorphic encryption that offer secure data processing. Unfortunately, these solutions cannot be used in practice as they incur nonnegligible runtime overheads and security risks. Moreover, as the majority of data management systems were designed to operate in private cloud environments, which are under the control of the data owner, they often lack appropriate mechanisms for access control as well as privacy assurance. In this paper we propose Vallum, a data access and protection layer that closes these gaps while enabling users to operate data management systems in shared environments such securely as public clouds. Vallum utilizes Intel SGX and remote attestation to ensure confidentiality and integrity of the data being stored and processed. Furthermore, it provides access protection and privacy assurance through a extensible architecture. Our performance evaluation indicates that the overhead introduced by Vallum makes it viable to be deployed in cloud infrastructures.