cloud_at_work:work_programme:work_programme_2010:bs_web_services

Secure access to web services over BlobSeer

  • PUB Student: Maria Dumbrava
  • PUB Advisor: Catalin Leordeanu
  • INRIA Advisor: Alexandra Carpen-Amarie

Description

This project addressed the problem of securely running web services on top of BlobSeer. Our goal was to deploy various web services that use BlobSeer as a back end storage layer and to provide a secure environment for the data they access. This involved the authentication and authorization of the users, as well as secure data transfer. Another aspect we dealt with was to hide the access to the BlobSeer nodes so that an attacker would not be able to target directly the storage nodes without going through the web server.

The published web services can be very different, from data transfer to video streaming. Another goal of the project was to provide the adequate security level depending on the type of web service. For example security sensitive applications have different requirements than those focused on performance which would only need a basic authentication level using certificates.

More details: Thesis


Page Tools