Marciano da Rocha has paper accepted at 10th CLOSER

Marciano da Rocha is a student in the Software Engineering course at the Federal University of Technology – Paraná, Campus Dois Vizinhos, and develops his undergraduate thesis in the area of data security, under the advisory of professors Rodrigo Tomaz Pagno and Newton Carlos Will.

The paper accepted for publication, entitled “Secure Cloud Storage with Client-Side Encryption Using a Trusted Execution Environment”, presents the use of data sealing feature, provided by the Intel Software Guard Extensions (Intel SGX) technology, for file encryption. A virtual file system is created in which applications can store their data, keeping the security guarantees provided by the Intel SGX technology, before send the data to a storage provider. This way, even if the storage provider is compromised, the data are safe.

To validate the proposal, the Cryptomator software, which is a free client-side encryption tool for cloud files, was integrated with an Intel SGX application (enclave) for data sealing. The results demonstrate that the solution is feasible, in terms of performance and security, and can be expanded and refined for practical use and integration with cloud synchronization services.

The paper was accepted at 10th International Conference on Cloud Computing and Services Science (CLOSER 2020), which will take place in May in the Czech Republic. The conference focuses on the highly important area of Cloud Computing, inspired by some latest advances that concern the infrastructure, operations, and available services through the global network. Further, the conference considers as essential the link to Services Science, acknowledging the service-orientation in most current IT-driven collaborations. The conference is nevertheless not about the union of these two (already broad) fields, but about Cloud Computing where we are also interested in how Services Science can provide theory, methods and techniques to design, analyze, manage, market and study various aspects of Cloud Computing.