On-Demand Computing fulfills the need of computing availability at limited hardware and software costs. Distributed systems of this kind typically store user files in a shared filesystem, and consequently can expose to high risks user’s private files, unless they are not protected by strong security mechanisms. In this paper, we describe an agent-based system which is able to keep private all user’s files on the storage, through the use of transparent and on-the-fly cryptographic techniques, which do not cause any modification to the node’s operating systems or application codes. Thanks to our approach, private files are always protected, even by malicious system administrators, while they are processed by a user’s application. Our system is designed so that it can be deployed in single-server or desktop computer contexts as well. We also report experimental results that show a low overhead of our techniques.
Fabio Dellutri, Salvatore Di Blasi, Giuseppe F. It