Definition and Verification of Privacy Metrics in Cloud Applications (VeriMetrix)

Basic data for this project

Description

Challenge The trend towards Cloud Computing is unabated. However, potential users hesitate to switch to the cloud and thus refrain from lowering their IT costs. The reason: many companies and government agencies are concerned about privacy and data security issues of cloud services. Additionally, compliance is a critical aspect of these considerations. This means there is a big societal demand for a solution that allows users to evaluate a cloud service with regard to its security and data protection properties. Goals and Approach The main goal of the VeriMetrix project is to develop new approaches and tools to model and quantify privacy requirements in cloud environments. Concepts and techniques to be developed within the scope of VeriMetrix facilitate new business models and market places. They create prerequisites for certified cloud services complying to a rule-set. VeriMetrix looks at the complete life cycle of cloud services: from creating privacy requirements and properties via choosing a suitable cloud service provider, using it and evaluating whether privacy demands are satisfied through to verifyably deleting all data after using the cloud service. Consortium The VeriMetrix consortium consists of avocado rechtsanwälte and careon GmbH as practice partners, Colt Technology Services GmbH as the cloud technology partner and the University of Münster as well as the Fraunhofer Institute for Secure Information Technology (Fraunhofer-Institut für Sichere Informationstechnologie, Fraunhofer SIT) as research partners. Additionally, Fraunhofer SIT acts as consortium manager. Funding and Duration The project "VeriMetrix—Definition and verification of key figures for pirvacy in cloud services" („VeriMetrix – Definition und Verifikation von Kennzahlen für den Datenschutz in Cloud-Anwendungen“) is based on a call for proposals by the Federal Ministry of Education and Research (Bundesministerium für Bildung und Forschung, BMBF) to promote research initiatives for Secure Cloud Computing, published on 23 May 2012. VeriMetrix started on 1 March 2014 with a duration of two years.