2026-09-19T22:11:21Z https://opus4.kobv.de/opus4-uni-passau/oai

oai:kobv.de-opus4-uni-passau:369 2025-08-13 bibliography:false doc-type:PhDThesis open_access ddc ddc:004

Tackling cloud compliance through information flow control Ralph Herkenhöner Dipl.-Inf. 004 Cloud Computing Compliance-System Informationsfluss cloud computing information flow compliance IT outsourcing to clouds bears new challenges to the technical implementation of legally compliant clouds. On the one hand, outsourcing companies have to comply with legal requirements. On the other hand, cloud providers have to support their customers in achieving compliance with these legal requirements when processing data in the cloud. Consequently, the questions arise when IT outsourcing to clouds is lawful, which legal requirements apply to data processing in clouds, and how cloud providers can support their customers on achieving legal compliance. In this thesis, answers to these questions are given by performing a legal analysis identifying the legal requirements and a technical analysis identifying how legal requirements can be addressed in the context of cloud computing. Further, an information flow analysis is done, resulting in a system theoretical model that is able to describe information flow control in clouds based on the security classification of virtual resources and hardware resources. In a proof-of-concept implementation which is based on the OpenStack open-source cloud platform, it is shown that information flow control can be implemented as a part of cloud management and that legal compliance can be monitored and reported based on the actual assignment of virtual resources to hardware resources. Thereby, cloud providers are able to provide cloud customers with cloud resources, which are automatically assigned to hardware resources that comply with the legal requirements of the cloud customers. This consequently empowers cloud customers to utilise cloud resources according to their legal requirements and to keep control of managing the legal compliance of their data processing in clouds. Universität Passau Passau Innstrasse 29, 94032 Passau Hermann de Meer Gerrit Hornung Andreas Mauthe 2016-06-02 2016-06-22 PhDThesis Text urn:nbn:de:bvb:739-opus4-3696 application/pdf eng Standardbedingung laut Einverständniserklärung thesis.doctoral Universität Passau Passau Fakultät für Informatik und Mathematik 1 https://opus4.kobv.de/opus4-uni-passau/oai/container/index/docId/369 https://opus4.kobv.de/opus4-uni-passau/frontdoor/index/index/docId/369