Panels HPCS2018

The International Conference on High Performance Computing & Simulation

(HPCS 2018)

The 16th Annual Meeting

July 16 – 20, 2018

Orléans, France

http://hpcs2018.cisedu.info/ or http://cisedu.us/rp/hpcs18

HPCS 2018 PANELS

PANEL I: The Cloud Forensic Problem and the European Union

General Data Protection Regulation (GDPR)

MODERATOR: Robert Duncan

(University of Aberdeen, Aberdeen, U.K.)

PANEL MEMBERS:

Martin Gilje Jaatun (SINTEF Digital, Trondheim, Norway)

George Weir (University of Strathclyde, Glasgow, U.K.)

Magnus Westerlund (Arcada University of Applied Sciences, Helsinki, Finland)

PANEL ABSTRACT:

Cloud computing has been a great enabler for a great many companies and individuals in the decade or so since it gained traction. The ability to access new systems rapidly without concern for forward planning, accessing corporate budgets and in particular the ability to scale up (or down) on demand has proved particularly attractive. A great many researchers have been actively involved to ensure that systems are developed in a responsible way to ensure the security and privacy of users.

However, there remains a fundamental issue which is of great concern. Namely, that once an attacker successfully breaches a cloud system and becomes an intruder, usually escalating privileges the longer they are in the system, there is nothing then to prevent them from deleting or modifying the forensic trail. This presents a serious challenge, and in the light of the forthcoming regulation from various countries, and of particular interest the forthcoming EU General Data Protection Regulation (GDPR), which has a regime of penalties that can rise up to the greater of €20 million or 4% of Global Turnover. The other challenging aspect of this legislation is that any security breach must be reported within 72 hours. For cloud users who are breached, particularly where the intruder deletes or modifies the forensic trail, this becomes a virtually impossible requirement to comply with, which can also lead to an increase in the fine levied.

Solving this problem presents a seriously difficult challenge, but without solving this problem, this leads to a serious issue with compliance on the EU GDPR and other similar legislation around the globe, which can lead to massive levels of fines being levied. Looking at the cyber breach reports regularly carried out each year by a number of security organizations, it is very clear that a great many companies are nowhere near being able to comply with this tight reporting requirement, let alone understand which records have been accessed, modified or deleted. Given that the regulation comes into effect on the 25th May 2018, it is clear that many companies are walking blind into a major disaster.

This panel will address the above issues and consequences.

PANELISTS SHORT BIOS:

Martin Gilje Jaatun is a Senior Scientist at SINTEF Digital and an Adjunct Professor at the University of Stavanger. He graduated from the Norwegian Institute of Technology (NTH) in 1992, and received the Dr.Philos. degree from the University of Stavanger in 2015. Previous positions include scientist at the Norwegian Defence Research Establishment (FFI), and Senior Lecturer in information security at the Bodø Graduate School of Business. His research interests include software security, security in cloud computing, and security of critical information infrastructures. He is vice chairman of the Cloud Computing Association (cloudcom.org), vice chair of IEEE TCCLD, and a Senior Member of the IEEE. He is also an IEEE Cybersecurity ambassador, and Editor-in-Chief of the International Journal of Secure Software Engineering.

George Weir is a Lecturer in Computer Science, University of Strathclyde, U.K., and Adjunct Professor at the School of Criminology, Simon Fraser University, Canada. Dr. Weir has published extensively on Security, HCI, e-learning, readability and Corpus Linguistics. His current focus is on Security and Digital Forensics in the Cloud. Dr. Weir has been supervising 13 PhD students on aspects of Information Security.

Magnus Westerlund is a senior lecturer in software development and programme director of the master degree programme in big data analytics at Arcada University of Applied Sciences in Helsinki, Finland. He has a background from the private sector in telecom and information management. Magnus has research publications in the field of analytics, IT-security, GDPR, and most recently the application of blockchain technology. His current research topics are found in the convergence area of the distributed cloud enabled by distributed ledger technology, extended reality, and the application of intelligent agents.