1. 1 Plenary Panel on Cloud Security and Privacy: What is new and What needs to be done? Ravi Sandhu Executive Director and Endowed Professor December 2010 ravi.sandhu@utsa.edu, www.profsandhu.com, www.ics.utsa.edu © Ravi Sandhu World-Leading Research with Real-World Impact! Institute for Cyber Security

2.  Attractions of Cloud Computing:  Economics  Productivity  Concerns About Cloud Computing:  Dependability  Security  Guess who wins?! © Ravi Sandhu 2 World-Leading Research with Real-World Impact! What is Not New

3. Cyber security has evolved  Computer security  Computer security + Communications security  Consider ACM Computer and Communications Security (CCS) Conference founded 1993  Information security  Information assurance  Mission assurance  The cloud, or any other cyber infrastructure, by itself cannot guarantee mission assurance.  Cyber security then becomes a piece of the larger goal of mission assurance. © Ravi Sandhu 3 World-Leading Research with Real-World Impact! What is New

4. Understand the Problem  Internet authentication:  Data security in the cloud: © Ravi Sandhu 4 World-Leading Research with Real-World Impact! What Needs to be Done PKI Smartcards Passwords Secret Questions Homomorphic Encryption Something Simpler??