PaaSword – A Holistic Data Privacy and Security by Design Platform-as-a Service Framework

Security and data privacy concerns impede the wide adoption of enterprise cloud computing. The EU Horizon 2020 project PaaSword addresses these challenges by developing a holistic security and privacy preserving framework.

OUR FOCI

DATA PRIVACY & SECURITY

PaaSword offers a security by design framework enabling security annotations, transparently in your IDE, transformed into context-aware security policies that enforce access control, cryptographic protection and physical distribution for securing sensitive data.

SECURE PLATFORM-AS-A-SERVICE

PaaSword provides encrypted storage and context-aware access control for Platform-as-a-Service. It thereby delivers key components to protected next generation cloud applications against internal and external adversaries.

RESEARCH & INNOVATION

PaaSword is a Horizon 2020 project with ten partners from industry and academia. By maximizing the trust of individuals and corporate customers in the cloud, it is expected to enable European enterprises to unlock valuable business, economic and operational benefits.

SOLUTION

Data privacy & security framework / Searchable encryption scheme

The innovative approach for key management maximizes customer´s control over their data with a sophisticated context-aware access control mechanism.

Enterprise security governance

The implementation is supported by new access control mechanisms that incorporate dynamically changing contextual information into access control policies and context-dependent access rights.

Cloud Security Alliance’s / virtual database middleware technologies

Paasword extends the Cloud Security Alliance´s principles by using a technology which introduces a scalable secure cloud database abstraction layer with data distribution and encryption methods.

Support developers of cloud applications / code annotation techniques

Supporting developers of cloud applications with code annotation techniques helps to secure an appropriate level of protection for the application’s data.