Are Clouds making Our Research Irrelevant and Who Is at Fault? (Position Paper)

Yvo Desmedt

2022

Abstract

Until recently, the user of a computer system was able to (at least to some degree) help decide security policies, such as which access and information flow control to use, which cryptographic algorithms to choose, how to secure databases in use, etc. Due to these choices, researchers were able to have an impact on what was deployed. In today’s world, the Chief Information Officer (CIO) outsources online communication (replacing landlines), databases, e-mail, storage, voting, WWW, etc., to clouds. These do not use open source and do not disclose their design. So, the security is left to the designer and the user is completely left in the dark. Since most programmers never took a course in information security, we should assume the worst. In our paper we justify several positions: (i) we make the claim that clouds have lowered our information security; (ii) we wonder whether CIOs compare competing clouds on their security properties and ask independent experts for their advice; (iii) one finds that self-acclaimed experts often lack basic knowledge; (iv) that research is becoming irrelevant. We also wonder who is at fault for these problems and how we can address them.

Paper Citation

in Harvard Style

Desmedt Y. (2022). Are Clouds making Our Research Irrelevant and Who Is at Fault? (Position Paper). In Proceedings of the 19th International Conference on Security and Cryptography - Volume 1: SECRYPT, ISBN 978-989-758-590-6, pages 436-442. DOI: 10.5220/0011328800003283

in Bibtex Style

@conference{secrypt22,
author={Yvo Desmedt},
title={Are Clouds making Our Research Irrelevant and Who Is at Fault? (Position Paper)},
booktitle={Proceedings of the 19th International Conference on Security and Cryptography - Volume 1: SECRYPT,},
year={2022},
pages={436-442},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0011328800003283},
isbn={978-989-758-590-6},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 19th International Conference on Security and Cryptography - Volume 1: SECRYPT,
TI - Are Clouds making Our Research Irrelevant and Who Is at Fault? (Position Paper)
SN - 978-989-758-590-6
AU - Desmedt Y.
PY - 2022
SP - 436
EP - 442
DO - 10.5220/0011328800003283