Abstract-C ompliance with regulatory policies on data remains a ke y hurdle to cloud computing. Policies such as EU privac y , HIPAA, and PCI-DSS place requirements on data availabilit y , integrit y , migration, retention, and access, among man y others. This paper proposes a polic y management service that offers scalable management of data retention policies attached to data obj ects stored in a cloud environment. The management service includes a highl y available and secure encr y ption ke y store to manage the encr y ption ke y s of data obj ects. By deleting the encr y ption ke y at a specified retention time associated with the data obj ect, we effectivel y delete the data obj ect and its copies stored in online and offline environments. To achieve scalabilit y , our service uses Hadoop MapReduce to perform parallel management tasks, such as data encr y ption and decr y ption, ke y distribution and retention polic y enforcement. A protot y pe deplo y ed in a 16-machine Linux cluster currentl y supports 56 MB/sec for encr y ption, 76 MB/sec for decr y ption, 31,000 retention policies/sec read and 15,000 retention policies/sec write.
Jun Li et al. REF [10] propose a policy management service that offers scalable management of data assurance policies attached to data objects stored in a cloud environment.
Managing data retention policies at scale
12th IFIP/IEEE International Symposium on Integrated Network Management (IM 2011) and Workshops
12th IFIP/IEEE International Symposium on Integrated Network Management (IM 2011) and Workshops
Computer Science