DOCSLIB.ORG

Sicheres Cloud Computing in Der Praxis

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Sicheres Cloud Computing in Der Praxis Sicheres Cloud Computing in der Praxis Identifikation relevanter Kriterien zur Evaluierung der Praxistauglich- keit von Technologieansätzen im Cloud Computing Umfeld mit dem Fo- kus auf Datenschutz und Datensicherheit. Dissertation zur Erlangung des akademischen Grades Dr. rer. nat. Herr M.Sc. Paul Reinhold geboren am 24.Februar 1987 in Zschopau Fakultät für Informatik an der Technischen Universität Chemnitz Gutachter: 1. Prof. Dr. Wolfgang Benn 2. Prof. Dr. Wolfram Hardt 3. Prof. Dr. Dirk Labudde Tag der Verteidigung: 02. Februar 2017 Online-Veröffentlichung: http://nbn-resolving.de/urn:nbn:de:bsz:ch1-qucosa-222280 Abstract In dieser Dissertation werden verschiedene Anforderungen an sicheres Cloud Computing unter- sucht. Insbesondere geht es dabei um die Analyse bestehender Forschungs- und Lösungsansätze zum Schutz von Daten und Prozessen in Cloud-Umgebungen und um die Bewertung ihrer Praxi- stauglichkeit. Die Basis für die Vergleichbarkeit stellen spezifizierte Kriterien dar, nach denen die untersuchten Technologien bewertet werden. Hauptziel dieser Arbeit ist zu zeigen, auf welche Weise technische Forschungsansätze verglichen werden können, um auf dieser Grundlage eine Bewertung ihrer Eignung in der Praxis zu ermögli- chen. Hierzu werden zunächst relevante Teilbereiche der Cloud Computing Sicherheit aufgezeigt, deren Lösungsstrategien im Kontext der Arbeit diskutiert und State-of-the-Art Methoden evaluiert. Die Aussage zur Praxistauglichkeit ergibt sich dabei aus dem Verhältnis des potenziellen Nutzens zu den damit verbundene erwartenden Kosten. Der potenzielle Nutzen ist dabei als Zusammenfüh- rung der gebotenen Leistungsfähigkeit, Sicherheit und Funktionalität der untersuchten Technologie definiert. Zur objektiven Bewertung setzten sich diese drei Größen aus spezifizierten Kriterien zu- sammen, deren Informationen direkt aus den untersuchten Forschungsarbeiten stammen. Die zu erwartenden Kosten ergeben sich aus Kostenschlüsseln für Technologie, Betrieb und Entwicklung. In dieser Arbeit sollen die zugleich spezifizierten Evaluierungskriterien sowie die Konstellation der obig eingeführten Begriffe ausführlich erläutert und bewertet werden. Für die bessere Abschätzung der Eignung in der Praxis wird in der Arbeit eine angepasste SWOT- Analyse für die identifizierten relevanten Teilbereiche durchgeführt. Neben der Definition der Prak- tikabilitätsaussage, stellt dies die zweite Innovation dieser Arbeit dar. Das konkrete Ziel dieser Ana- lyse ist es, die Vergleichbarkeit zwischen den Teilbereichen zu erhöhen und so die Strategieplanung zur Entwicklung sicherer Cloud Computing Lösungen zu verbessern. I Inhaltsverzeichnis Teil I Einleitung und Grundlagen 1 1. Einleitung 5 1.1. Thesen der Arbeit . .6 1.2. Struktur der Arbeit . .7 2. Grundlagen 9 2.1. Cloud Computing . .9 2.2. Cloud Computing und Sicherheit . 14 2.3. Taxonomie der Cloud-Sicherheit . 17 2.4. Cloud Computing und IT-Compliance . 19 2.4.1. Cloud Computing und Datenschutz . 19 2.4.2. Cloud Computing und Service Level Agreements . 24 2.4.3. Cloud Computing und Zertifizierung . 26 Teil II Theoretisch-technische Analyse und Evaluierung 27 3. Cloud-Sicherheitsmanagement 29 3.1. Zugangskontrolle . 30 3.2. Zugriffskontrolle . 32 3.3. Identitätsmanagement . 33 3.4. Schlüsselmanagement . 36 3.5. Logging und Auditierung . 38 3.6. IT Compliance . 39 3.7. Zusammenfassung . 40 4. Cloud-Applikationssicherheit 41 4.1. Replikation und Verteilung . 42 4.2. Applikationslogik . 43 4.2.1. Verschleierung . 43 4.2.2. Beweisbasierte und verifizierte Berechnung . 44 4.2.3. Sichere Funktionsevaluierung . 45 4.2.4. Funktionale Verschlüsselung . 52 4.2.5. Zusammenfassung . 54 4.3. Datenbanken . 55 4.4. Dateisysteme . 59 4.5. Anonymisierung . 62 III IV Inhaltsverzeichnis 4.6. Datenzugriff . 66 4.7. Zusammenfassung . 68 5. Trusted Cloud Computing 69 5.1. Trusted Plattform Module . 70 5.1.1. Virtuelle Trusted Plattform Module . 72 5.2. Sichere Ausführungsumgebungen . 74 5.3. Hardware-Sicherheitsmodule . 76 5.4. Zusammenfassung . 78 6. Cloud-Virtualisierungssicherheit 79 6.1. Virtualisierung im Zusammenhang mit Cloud Computing . 80 6.2. Sichere Virtualisierungslösungen . 82 6.2.1. Trusted Virtualization . 83 6.2.2. Geschachtelte Virtualisierung . 84 6.3. Zusammenfassung . 86 Teil III Technologie-Evaluierung nach ausgewählten Kriterien 87 7. Technologie Evaluierung 89 7.1. Evaluierungskriterien . 90 7.1.1. Potenzieller Nutzen N ................................. 90 7.1.2. Kosten K ........................................ 92 7.1.3. Praktikabilitätsaussage P ............................... 94 7.1.4. Leistungsfähigkeit L .................................. 95 7.1.5. Sicherheit S ....................................... 97 7.1.6. Funktionalität F .................................... 99 7.1.7. Kategorisierung und Realisierung . 100 7.2. Evaluierungsergebnisse . 102 7.3. Auswertung und Diskussion . 109 7.3.1. Cloud-Sicherheitsmanagement-Lösungen . 112 7.3.2. Cloud-Applikationssicherheit-Lösungen . 114 7.3.3. Lösungen für Trusted Cloud Computing . 116 7.3.4. Cloud-Virtualisierungssicherheit-Lösungen . 118 7.3.5. Cloud-Applikation und Cloud-Umgebung . 120 8. Zusammenfassung 123 8.1. Fazit . 124 Teil IV Anhang 129 A. Auflistung der Evaluierungsergebnisse 131 Literaturverzeichnis 246 Abbildungsverzeichnis 2.1. Cloud Service Modelle . 10 2.2. Cloud-Deployment-Modelle . 11 2.3. Systemsicherheitsbegriff . 14 2.4. CIA-Prinzip der Datensicherheit . 15 2.5. Schemateischer Darstellung von Verfahren der sicheren Verarbeitung . 16 2.6. Taxonomie der Cloud-Sicherheit . 18 2.7. Erweitertes CIA Prinzip der Datensicherheit durch den Datenschutz . 21 3.1. Bestandteile des Cloud-Sicherheitsmanagements im Überblick . 29 3.2. Aufbau und Teilnehmer eines föderierte Identitätsmanagementsystems . 33 3.3. Überblick eines sicheren Log-Services . 38 4.1. Übersicht über die Cloud-Applikationssicherheit . 41 4.2. Szenarien der Applikationsreplikation und -verteilung auf zwei Cloud-Anbieter . 42 4.3. Strukutierung Abschnitt Applikationsslogik . 43 4.4. Repräsentation verschiedener auswertbarer Funktionen . 45 4.5. Aufbau und Funktion von Garbled Circuits . 46 4.6. Erzeugung eines sicheren Ordered Binary Decision Diagram . 47 4.7. Prinzip der homomorphen Verschlüsselung . 48 4.8. Bootstrapping und Neuverschlüsselung in voll homomorphen Verschlüsselungsver- fahren............................................... 49 4.9. Suchen innerhalb von verschlüsselten Daten . 52 4.10. Darstellung von attribut-basierter Verschlüsselung . 53 4.11. Die Architektur der CryptDB . 55 4.12. Architektur der Relational Cloud . 56 4.13. Unterscheidung Anonymisierung und Pseudonymisierung . 62 4.14. Das Prinzip der Reidentifizierung . 63 4.15. ORAM Datenorganisation . 66 5.1. Bestandteile des Trusted Cloud Computing im Überblick . 69 5.2. TMP-Chip Dastellung und interner Aufbau . 70 5.3. Darstellung von vTMP Architekturen . 72 5.4. Darstellung der TrustVisor Architektur . 74 5.5. Datenschutzkonzept nach Maniatis . 75 5.6. Die Abbildung eines IBM 4758 . 76 6.1. Bestandteile der Cloud-Virtualisierungssicherheit . 79 6.2. Grundprinzip der Virtualisierung . 80 V VI Abbildungsverzeichnis 6.3. Ansicht der NOVA Microhypervisor Architektur . 82 6.4. SEC2 Architektur nach Hao et.al. [HLMS10] . 83 6.5. Gegenüberstellung von sicheren Virtualisierungslösungen . 84 6.6. CloudVisor und Xen-Blanket Architektur . 85 7.1. Gegenüberstellung von Nutzen und Kosten . 89 7.2. Gleichung zur Berechnung der Leistungsfähigkeit . 96 7.3. Gleichung zur Berechung der Sicherheit . 98 7.4. Gleichung zur Berechung der Funktionalität . 100 7.5. Darstellung Kosten-Realisierungseffizienz Diagramm . 110 7.6. Praktikabilität im Cloud-Sicherheitsmanagement . 112 7.7. Praktikabilität in der Cloud-Applikationssicherheit . 114 7.8. Praktikabilität im Trusted Cloud Computing . 116 7.9. Verteilung in der Cloud-Virtualisierungssicherheit . 118 7.10. Verteilung für Cloud-Applikation und Cloud-Umgebung . 120 Tabellenverzeichnis.
Load more

Recommended publications
  • Inside Dropbox: Understanding Personal Cloud Storage Services
    Inside Dropbox: Understanding Personal Cloud Storage Services → Idilio Drago → Marco Mellia → Maurizio M. Munafo` → Anna Sperotto → Ramin Sadre → Aiko Pras IRTF – Vancouver Motivation and goals 1 Personal cloud storage services are already popular Dropbox in 2012 “the largest deployed networked file system in history” “over 50 million users – one billion files every 48 hours” Little public information about the system How does Dropbox work? What are the potential performance bottlenecks? Are there typical usage scenarios? Methodology – How does Dropbox work? 2 Public information Native client, Web interface, LAN-Sync etc. Files are split in chunks of up to 4 MB Delta encoding, deduplication, encrypted communication To understand the client protocol MITM against our own client Squid proxy, SSL-bump and a self-signed CA certificate Replace a trusted CA certificate in the heap at run-time Proxy logs and decrypted packet traces How does Dropbox (v1.2.52) work? 3 Clear separation between storage and meta-data/client control Sub-domains identifying parts of the service sub-domain Data-center Description client-lb/clientX Dropbox Meta-data notifyX Dropbox Notifications api Dropbox API control www Dropbox Web servers d Dropbox Event logs dl Amazon Direct links dl-clientX Amazon Client storage dl-debugX Amazon Back-traces dl-web Amazon Web storage api-content Amazon API Storage HTTP/HTTPs in all functionalities How does Dropbox (v1.2.52) work? 4 Notification Kept open Not encrypted Device ID Folder IDs How does Dropbox (v1.2.52) work? 4 Client control Login File hash Meta-data How does Dropbox (v1.2.52) work? 4 Storage Amazon EC2 Retrieve vs.
    [Show full text]
  • 4-BAY RACKMOUNT NAS Technical Specifications
    4-BAY RACKMOUNT NAS Technical Specifications Operating System Seagate® NAS OS (embedded Linux) Number of Drive Bays 4 hot-swappable 3.5-inch SATA II/SATA III Processor Dual-core 2.13GHz Intel® 64-bit Atom™ processor Memory 2GB DDR III Networking Two (2) 10/100/1000 Base-TX (Gigabit Ethernet) • Two (2) USB 3.0 (rear) • Two (2) USB 2.0 (rear) External Ports • One (1) eSATA (rear) • One (1) USB 2.0 (front) Hard Drive Capacity Seagate NAS HDD 2TB, 3TB, 4TB for preconfigured models Total Capacity 4TB, 8TB, 12TB, 16TB Compatible Drives 3.5-inch SATA II or SATA III (see NAS Certified Drive list PDF for more details) Power 100V to 240V AC, 50/60Hz, 180W Power Supply and • Sleep mode for power saving • Scheduled power on/off Power Management • Wake-on-LAN Cooling Management Two (2) fans Transfer Rate 200MB/s reads and writes1 Network Protocols CIFS/SMB, NFS v3, AFP, HTTP(s), FTP, sFTP, iSCSI, Print serve, failover and load balancing and Services (LACP 802.3ad), Wuala file system integration (W:/ network drive), Active Directory™ • RAID 0, 1, 5, 6, 10 RAID • Hot spare • SimplyRAID™ technology with mixed capacity support, volume expansion and migration • Web-based interface through http/https • Hardware monitoring (S.M.A.R.T., casing cooling and temperature, CPU and RAM load) Management • Log management and email notification • NAS OS Installer for diskless setup, data recovery and restore to factory settings • Product discovery with Seagate Network Assistant 1 Tested in RAID 5 configuration utilizing load balancing for Ethernet ports. Actual performance may vary depending on system environment.
    [Show full text]
  • The Application Usage and Risk Report an Analysis of End User Application Trends in the Enterprise
    The Application Usage and Risk Report An Analysis of End User Application Trends in the Enterprise 8th Edition, December 2011 Palo Alto Networks 3300 Olcott Street Santa Clara, CA 94089 www.paloaltonetworks.com Table of Contents Executive Summary ........................................................................................................ 3 Demographics ............................................................................................................................................. 4 Social Networking Use Becomes More Active ................................................................ 5 Facebook Applications Bandwidth Consumption Triples .......................................................................... 5 Twitter Bandwidth Consumption Increases 7-Fold ................................................................................... 6 Some Perspective On Bandwidth Consumption .................................................................................... 7 Managing the Risks .................................................................................................................................... 7 Browser-based Filesharing: Work vs. Entertainment .................................................... 8 Infrastructure- or Productivity-Oriented Browser-based Filesharing ..................................................... 9 Entertainment Oriented Browser-based Filesharing .............................................................................. 10 Comparing Frequency and Volume of Use
    [Show full text]
  • Building Large-Scale Distributed Applications on Top of Self-Managing Transactional Stores
    Building large-scale distributed applications on top of self-managing transactional stores June 3, 2010 Peter Van Roy with help from SELFMAN partners Overview Large-scale distributed applications Application structure: multi-tier with scalable DB backend Distribution structure: peer-to-peer or cloud-based DHTs and transactions Basics of DHTs Data replication and transactions Scalaris and Beernet Programming model and applications CompOz library and Kompics component model DeTransDraw and Distributed Wikipedia Future work Mobile applications, cloud computing, data-intensive computing Programming abstractions for large-scale distribution Application structure What can be a general architecture for large-scale distributed applications? Start with a database backend (e.g., IBM’s “multitier”) Make it distributed with distributed transactional interface Keep strong consistency (ACID properties) Allow large numbers of concurrent transactions Horizontal scalability is the key Vertical scalability is a dead end “NoSQL”: Buzzword for horizontally scalable databases that typically don’t have a complete SQL interface Key/value store or column-oriented ↑ our choice (simplicity) The NoSQL Controversy NoSQL is a current trend in non-relational databases May lack table schemas, may lack ACID properties, no join operations Main advantages are excellent performance, with good horizontal scalability and elasticity (ideal fit to clouds) SQL databases have good vertical scalability but are not elastic Often only weak consistency guarantees, such as eventual consistency (e.g., Google BigTable) Some exceptions: Cassandra also provides strong consistency, Scalaris and Beernet provide a key-value store with transactions and strong consistency Distribution structure Two main infrastructures for large-scale applications Peer-to-peer: use of client machines ← our choice (loosely coupled) Very popular style, e.g., BitTorrent, Skype, Wuala, etc.
    [Show full text]
  • Mass Surveillance
    Mass Surveillance Mass Surveillance What are the risks for the citizens and the opportunities for the European Information Society? What are the possible mitigation strategies? Part 1 - Risks and opportunities raised by the current generation of network services and applications Study IP/G/STOA/FWC-2013-1/LOT 9/C5/SC1 January 2015 PE 527.409 STOA - Science and Technology Options Assessment The STOA project “Mass Surveillance Part 1 – Risks, Opportunities and Mitigation Strategies” was carried out by TECNALIA Research and Investigation in Spain. AUTHORS Arkaitz Gamino Garcia Concepción Cortes Velasco Eider Iturbe Zamalloa Erkuden Rios Velasco Iñaki Eguía Elejabarrieta Javier Herrera Lotero Jason Mansell (Linguistic Review) José Javier Larrañeta Ibañez Stefan Schuster (Editor) The authors acknowledge and would like to thank the following experts for their contributions to this report: Prof. Nigel Smart, University of Bristol; Matteo E. Bonfanti PhD, Research Fellow in International Law and Security, Scuola Superiore Sant’Anna Pisa; Prof. Fred Piper, University of London; Caspar Bowden, independent privacy researcher; Maria Pilar Torres Bruna, Head of Cybersecurity, Everis Aerospace, Defense and Security; Prof. Kenny Paterson, University of London; Agustín Martin and Luis Hernández Encinas, Tenured Scientists, Department of Information Processing and Cryptography (Cryptology and Information Security Group), CSIC; Alessandro Zanasi, Zanasi & Partners; Fernando Acero, Expert on Open Source Software; Luigi Coppolino,Università degli Studi di Napoli; Marcello Antonucci, EZNESS srl; Rachel Oldroyd, Managing Editor of The Bureau of Investigative Journalism; Peter Kruse, Founder of CSIS Security Group A/S; Ryan Gallagher, investigative Reporter of The Intercept; Capitán Alberto Redondo, Guardia Civil; Prof. Bart Preneel, KU Leuven; Raoul Chiesa, Security Brokers SCpA, CyberDefcon Ltd.; Prof.
    [Show full text]
  • On the Security of Cloud Storage Services
    FRAUNHOFER INSTITUTE FOR SECURE INFORMATION TECHNOLOGY ON THE SECURITY OF CLOUD Sharing of data was a problem for CloudMe, Dropbox, Team- Summary Individuals or companies considering to use cloud STORAGE SERVICES Drive and Wuala. Problems occur if fi les are shared with non- storage services are advised to check whether a cloud provider MANAGEMENT SUMMARY subscribers by a long, unpredictable URL. CloudMe does not meets these security requirements. obfuscate this URL adequately. Dropbox gives an unclear de- scription wrt to sharing details, TeamDrive is weak when disin- In addition, it is worthwhile to consider using more than one viting a group member and Wuala enables information gathe- service to reduce the impacts of service downtime. Further, ring by including the user name in public URLs. CloudMe does calculation of the time to recover all data from the cloud is re- not prevent search engines from accessing the workspace. commended. Depending on the individual amount of data, this may take several days. Having a plan for a provider Deduplication was a problem for Mozy and Wuala, because change in the future reduces the dependancy on a particular in some cases it is possible to ask the cloud storage provider provider (provider lock-in). This will be relevant, for example, if whether a fi le is already stored or not. the chosen provider is getting too expensive or is not longer compliant with governmental rules. As a major result, the stu- Data confi dentiality can be improved by users by encrypting dy shows that most of the analyzed cloud storage providers their data locally before uploading it to the cloud.
    [Show full text]
  • Online Research Tools
    Online Research Tools A White Paper Alphabetical URL DataSet Link Compilation By Marcus P. Zillman, M.S., A.M.H.A. Executive Director – Virtual Private Library [email protected] Online Research Tools is a white paper link compilation of various online tools that will aid your research and searching of the Internet. These tools come in all types and descriptions and many are web applications without the need to download software to your computer. This white paper link compilation is constantly updated and is available online in the Research Tools section of the Virtual Private Library’s Subject Tracer™ Information Blog: http://www.ResearchResources.info/ If you know of other online research tools both free and fee based feel free to contact me so I may place them in this ongoing work as the goal is to make research and searching more efficient and productive both for the professional as well as the lay person. Figure 1: Research Resources – Online Research Tools 1 Online Research Tools – A White Paper Alpabetical URL DataSet Link Compilation [Updated: August 26, 2013] http://www.OnlineResearchTools.info/ [email protected] eVoice: 800-858-1462 © 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013 Marcus P. Zillman, M.S., A.M.H.A. Online Research Tools: 12VPN - Unblock Websites and Improve Privacy http://12vpn.com/ 123Do – Simple Task Queues To Help Your Work Flow http://iqdo.com/ 15Five - Know the Pulse of Your Company http://www.15five.com/ 1000 Genomes - A Deep Catalog of Human Genetic Variation http://www.1000genomes.org/
    [Show full text]
  • Online Security for Independent Media and Civil Society Activists
    Online Security for Independent Media and Civil Society Activists A white paper for SIDA’s October 2010 “Exile Media” conference Eric S Johnson (updated 13 Oct 2013) For activists who make it a priority to deliver news to citizens of countries which try to control the information to which their citizens have access, the internet has provided massive new opportunities. But those countries’ governments also realise ICTs’ potential and implement countermeasures to impede the delivery of independent news via the internet. This paper covers what exile media can or should do to protect itself, addressing three categories of issues: common computer security precautions, defense against targeted attacks, and circumventing cybercensorship, with a final note about overkill (aka FUD: fear, uncertainty, doubt). For each of the issues mentioned below, specific ex- amples from within the human rights or freedom of expression world can be provided where non-observance was cata- strophic, but most of those who suffered problems would rather not be named. [NB Snowden- gate changed little or nothing about these recommendations.] Common computer security: The best defense is a good … (aka “lock your doors”) The main threats to exile media’s successful use of ICTs—and solutions—are the same as for any other computer user: 1) Ensure all software automatically patches itself regularly against newly-discovered secu- rity flaws (e.g. to maintain up-to-date SSL certificate revocation lists). As with antivirus software, this may cost something; e.g. with Microsoft (Windows and Office), it may re- quire your software be legally purchased (or use the WSUS Offline Update tool, which helps in low-bandwidth environments).
    [Show full text]
  • (More) Side Channels in Cloud Storage Linking Data to Users
    (More) Side Channels in Cloud Storage Linking Data to Users Tobias Pulls Department of Computer Science Karlstad University Karlstad, Sweden [email protected] Abstract. Public cloud storage services are gaining in popularity and several commercial actors are offering their services for users, however, not always with the security and privacy of their users as the primary design goal. This paper investigates side channels in public cloud storage services that allow the service provider, and in some cases users of the same service, to learn who has stored a given file and to profile users' usage of the service. These side channels are present in several public cloud storage services that are marketed as secure and privacy-friendly. Our conclusions are that cross-user deduplication should be disabled by default and that public cloud storage services need to be designed to provide unlinkability of users and data, even if the data is encrypted by users before storing it in the cloud. 1 Introduction The setting for this paper is that of cloud storage services, where a service provider offers a service for users to store their data in the cloud. Commercial cloud storage services such as Dropbox [8], SpiderOak [21], Tarsnap [22], and Wuala [28] provide storage for millions of users and are gaining in popularity. These cloud storage services are all public clouds, that is, they are available to the general public over the Internet [16]. For so called private clouds [16], in the case of all infrastructure being completely operated by the entity using the infrastructure, the issues raised in this paper are in part or completely non- issues.
    [Show full text]
  • Twice the Storage Capacity in Half the Space 8-BAY
    8-BAY RACKMOUNT NAS Data Sheet Twice the storage capacity in half the space The Seagate® Business Storage 8-bay Rackmount NAS is a complete network storage solution designed to keep businesses with up to 250 employees productive by creating a secure, shared space for file storage and backup. With its innovative 8-bay design in a 1U form factor, it’s the perfect network storage solution for growing businesses. The 8-bay Rackmount NAS is built with enterprise-class hardware inside and out, making it the ideal solution for businesses that demand a higher level of performance and reliability. It features Seagate Constellation® ES.3 enterprise drives, ECC RAM, redundant power supplies and dual Gigabit Ethernet ports for increased reliability, data integrity and uptime. Moreover, the 8-bay Rackmount NAS is the first network-attached storage product to offer eight 3.5-inch drives in a 1U form factor, providing double the capacity in essentially the same footprint. In addition, the 8-bay Rackmount NAS features hot-swappable fans and drive bays, sliding rails and best-in-class cable management for easy serviceability. Powered by the performance-optimized Seagate NAS OS and featuring a 2.3GHz dual-core Intel processor coupled with 4GB of RAM, the 8-bay Rackmount NAS delivers impressive file transfer performance of up to 200MB/s. Plus, built-in support for iSCSI enables maximum performance and compatibility for virtualized environments. Collaboration, sharing and anywhere access are brought together seamlessly with the integrated Wuala cloud service and business-focused apps for Windows, Mac®, smartphone and tablet.
    [Show full text]
  • A Measurement Study of the Wuala On-Line Storage Service
    A Measurement Study of the Wuala On-line Storage Service Thomas Mager, Ernst Biersack, and Pietro Michiardi EURECOM Sophia Antipolis, France fmager,erbi,[email protected] Abstract—Wuala is a popular online backup and file sharing • Understand if and how coding techniques are used to system that has been successfully operated for several years. assure the availability and durability of the data in case Very little is known about the design and implementation of of node failures Wuala. We capture the network traffic exchanged between the machines participating in Wuala to reverse engineer the design • Determine the transport protocol used to move data and operation of Wuala. When Wuala was launched, it used between peers and servers a clever combination of centralized storage in data centers for • Describe the evolution Wuala has undergone between long-term backup with peer-assisted file caching of frequently 2010 and 2012. downloaded files. Large files are broken up into transmission blocks and additional transmission blocks are generated using Our findings indicate that Wuala uses a simple, yet clever a classical redundancy coding scheme. Multiple transmission system design. Data availability – i.e., making sure that files blocks are sent in parallel to different machines and reliability is are accessible at any time – and durability – that is ensuring assured via a simple Automatic Repeat Request protocol on top of that files are never lost – are achieved by relying on servers UDP. Recently, however, Wuala has adopted a pure client/server based architecture. Our findings and the underlying reasons are located in a data center, instead of using peers.
    [Show full text]
  • Secure Dropbox Alternatives Comparison Chart*
    Secure Dropbox Alternatives Comparison Chart* SpiderOak Wuala Tresorit Mega.co.nz Sync.com TeamDrive Yes – AES-256 in CFB Yes – 256-bit symmetric key (CFB AES- 256 Yes – AES-128 Yes – 256-bit AES Yes – 256-bit symmetric Client-side encryption mode and HMAC-SHA256 mode) Transit encryption Yes – SSL Yes Yes – TLS Yes – TLS Yes – SSL SSL Server-side encryption Yes Yes Yes Yes Yes Server location US EU EU EU/NZ Canada EU Number of devices Unlimited Unlimited 3 / 5 / 10 Unlimited Unlimited Unlimited OS Mac/Windows/Linux Mac/Windows/Linux Mac/Windows Mac/Windows/Linux Mac/Windows Mac/Windows/Linux File sharing Yes Yes – Business only Yes Yes Yes Yes Permission handling Yes Yes Yes No Yes Yes Mobile apps Yes Yes Yes Yes Yes Yes 2-factor authenticfication No No Yes – Business only No No No Version history Yes Yes Yes – Premium and Business only No Yes Yes Activity history Limited N/A Yes – 7 days / 90 days / unlimited No N/A N/A Encrypted links Password protection Password protection Yes No Password protection No Folder sync Yes Yes Yes Yes Yes Yes Automatic backup Yes Yes Yes No Yes Yes HIPAA compliant Yes No Still in progress (FIPS 140-2 compliant)No Yes No Max. file size Unlimited 100 GB 0.5 GB / 2 GB / 2 GB Unlimited Unlimited N/A Free storage Yes – 2 GB No Yes – 3 GB Yes – 50 GB 5 GB 2 GB PRO I: 9.99€/500GB/1TB bandwidth/month Professional: Personal: Premium: 12.50$/month PRO II: 19.99€/2TB/4TB Teamdrive Pro: Pricing 10$/month/100GB 12.50$/100GB/month Pro: 49$/500GB/year Business: 25$/month/user bandwidth/month 30$/50GB/month Business: 5$/month/user Business: 465$/5 user/year PRO III: 29.99€/4TB/8TB bandwidth/month Web Site More info More info More info More info More info More info * the full article can be found here: http://www.cloudwards.net/dropbox-alternatives/ Yes – 256-bit symmetric.
    [Show full text]