![Page 1: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/1.jpg)
![Page 2: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/2.jpg)
Ø “Internalising Externali/es for Improving Compu/ng Architectures: Trust, Privacy, Regula/on, and Intellectual Property Rights”
1st February 2012
![Page 3: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/3.jpg)
Internalising Externalities… (notably for Clouds)
Mark Perry
Professor, Computer Science Associate Dean Law Barrister and Solicitor
IARIA Fellow
![Page 4: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/4.jpg)
1st February 2012
Today’s Agenda ² What’s a cloud ² Research in context of distributed compu7ng evolu7on ² Cloud issues ² Some externali7es ² ‘x by design’ ² What next?
Internalising externalities
![Page 5: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/5.jpg)
why cloud?
– Nearly one third of organiza7ons either already use or plan to use cloud or soBware-‐as-‐a-‐service (SaaS) offerings to augment their core business intelligence (BI) func7ons, according to (Gartner Jan 2012)
– hOp://www.gartner.com/it/page.jsp?id=1903814
![Page 6: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/6.jpg)
• "cloud compu7ng is a model for enabling ubiquitous, convenient, on-‐demand network access to a shared pool of configurable compu7ng resources (e.g., networks, servers, storage, applica7ons and services) that can be rapidly provisioned and released with minimal management effort or service provider interac7on.” NIST 25th Oct 2011
Presentation Title Here
Clouds
![Page 7: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/7.jpg)
per NIST
• Finally the Na7onal Ins7tute of Standards and Technology (NIST) has published their cloud defini7ons…. these are reviewed here….
• • The five “Essential Characteristics” • The three “Service Models” • The four “Deployment Models”
if you are current on this please sleep for 5 mins
![Page 8: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/8.jpg)
Essen7al Characteris7cs
• see • The NIST Defini/on of Cloud Compu/ng (NIST Special Publica/on 800-‐145). Oct 2011
![Page 9: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/9.jpg)
Service Modes
• SoHware as a Service (SaaS) • PlaKorm as a Service (PaaS) • Infrastructure as a Service (IaaS)
![Page 10: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/10.jpg)
Deployment Models • Private cloud
– Single organisa7on • Community cloud
– Specific community • Public cloud
– Open use • Hybrid cloud
– More than one of the above – See The NIST Defini/on of Cloud Compu/ng (NIST Special Publica/on 800-‐145). Oct 2011
![Page 11: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/11.jpg)
Cloud infrastructures
![Page 12: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/12.jpg)
Internalising externalities
So what have I been doing?
![Page 13: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/13.jpg)
Last century….
• automation of licensing for various Intellectual Property rights
• allow for flexible licensing • grants from NSERC and IBM • ontologies and policies to drive automation
of licensing, treating as resource/constraint
![Page 14: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/14.jpg)
autonomic license management
Zhao, Q, and Perry, M.
![Page 15: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/15.jpg)
From standalone to clouds
2000 2005 2010 2012 1995
Started work on IP integra7on into servers
Trust integra7on with web services
Trust integra7on with web services
My work
• see Forrester 7meline
![Page 16: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/16.jpg)
Seven Worries (Gartner)
1. Privileged users 2. Regulatory compliance 3. Data loca7on 4. Data segrega7on 5. Recovery 6. Inves7ga7ve support 7. Long-‐term viability
![Page 17: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/17.jpg)
Problems with clouds
• If the cloud goes down then your business goes down…. eg Google Apps as well as Gmail in Feb 2009
• By End of 2014 at Least 10 Percent of Enterprise Email Seats Will Be Based on a Cloud or SoBware-‐as-‐a-‐Service Model (Gartner Sept 2011)
hOp://www.gartner.com/it/page.jsp?id=1796914
![Page 18: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/18.jpg)
cloud
Privacy
Regs
IP
Trust
Can cloud externalities be internalised?
![Page 19: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/19.jpg)
Internalising externalities
Privacy
Karthick Ramachandran is working on this
cloud
Privacy
Regs
IP
Trust
![Page 20: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/20.jpg)
Privacy l From “break open doors, locks, and boxes, and to
seize a man and all his books … for papers are often the dearest property any man can have”
l Tort of trespass (protects person and property) l but indirectly protected also privacy, for the
technology available at that time did not permit to invade privacy without invading property (trespassing...)
l Technological advances allowed what was not possible: wire-tapping a phone line permitted to access infos without trespassing the property...
![Page 21: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/21.jpg)
Privacy l The Right to Privacy, Warren and Brandeis
Harvard Law Review. Vol. IV, 5 December 15, 1890 defined it as “The right to be let alone”
l Olmstead v. United States, 277 U.S. 438 (1928) holding that wire-tapping is not violation of P.
l Katz v. United States, 389 U.S. 347 (1967), overruling Olmstead and extending forth amendment wherever a person has a “reasonable expectation of privacy”.
![Page 22: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/22.jpg)
Privacy l Technology develops... l Kyllo v. United States, 533 U.S. 27 (2001),
“the use of a thermal imaging device from a public vantage point to monitor the radiation of heat from a person's home was a "search" within the meaning of the Fourth Amendment, and thus required a warrant. Because the police in this case did not have a warrant, the Court reversed Kyllo's conviction for growing marijuana”
![Page 23: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/23.jpg)
Privacy
l To “data protection and the right to be informed how our data are stored and used”
l 1980 Organization for Economic Cooperation and Development, issued Guidelines Governing the Protection of Privacy and Trans-Border Flows of Personal Data
l Offers a set of principles that have been enacted into many different jurisdictions
![Page 24: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/24.jpg)
Privacy
l Europe: Data Protection Directive (officially Directive 95/46/EC on the protection of individuals with regard to the processing of personal data and on the free movement of such data)
l USA: sectoral approach (financial, health, credit, debit, etc)
l Canada: public, private, commercial (PIPEDA)
![Page 25: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/25.jpg)
Privacy l Canadian Charter of Rights and Freedoms
protects against unreasonable search and seizure, SCC stated that it must be interpreted extensively
l PIPEDA = Personal Information Protection and Electronic Documents Act applies to commercial activities (there is similar legislation for public federal and provincial bodies)
l Implements OECD principles
![Page 26: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/26.jpg)
Privacy l Accountability l Identifying purpose l Consent l Limiting Collection l Limiting Use l Accuracy l Safeguards l Safeguards l Individual Access l Challenging compliance
![Page 27: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/27.jpg)
Privacy l Where are our data stored? l Do we even know? l Isn't cloud computing business model and
technological paradigm about not caring where the data are stored?
l Do all these privacy regulations make any sense for the protection of our data considering the technologies we are using nowadays?
l Trans-border flows of Data to non-compliant jurisdictions...
![Page 28: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/28.jpg)
Threats to privacy in clouds
l Sharing of data with an unauthorized party l Corruption of data stored l Malicious internal users l Data loss and leakage l Account or service hijacking
![Page 29: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/29.jpg)
a simple email solu7on
• The problem – to ensure that email kept private
• A solu7on – encrypt it all
• but then hard to search
• Our CHAAVI solu7on….
![Page 30: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/30.jpg)
usual
ERE#D�FRP0DLO�8VHU�$JHQW
DOLFH#D�FRP0DLO�8VHU�$JHQW
0DLO�7UDQVIHU�$JHQW
0DLO�7UDQVIHU�$JHQW
DOLFH#D�FRP0DLO�8VHU�$JHQW
,QWHUQHW
ERE#E�FRP0DLO�8VHU�$JHQW
DOLFH#D�FRP0DLO�8VHU�$JHQWDOLFH#E�FRP0DLO�8VHU�$JHQW
6073 323�,0$3
![Page 31: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/31.jpg)
chaavi
%URZVHU
%URZVHU�([WHQVLRQ��(QFU\SWLRQ�(QJLQH�
:HE�$SSOLFDWLRQ
:HE�6HUYHU
'DWDEDVH
0DLO�6HUYHU
(QFU\SWHG�0DLO�DQG�.H\ZRUGV
(QFU\SWHG�0DLO
.H\ZRUGV
![Page 32: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/32.jpg)
![Page 33: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/33.jpg)
![Page 34: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/34.jpg)
so what?
• we can use a cloud mail system with fairly strong encryp7on and maintain the ability to search the mail
• overheads ‘not too bad’
• see Chaavi: A Privacy Preserving architecture for Webmail Systems Karthick Ramachandran, Hanan Lupiyya and Mark Perry (cloud compu7ng 2011)
![Page 35: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/35.jpg)
Cloud Privacy
![Page 36: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/36.jpg)
• see Margoni, Perry and Ramachandran, Clarifying Privacy in the Clouds. (Cyberlaws 2011). Available at SSRN: hOp://ssrn.com/abstract=1755225 or doi:10.2139/ssrn.1755225
• Ramachandran, Lupiyya and Perry Chaavi: A Privacy Preserving architecture for Webmail Systems (cloud compu7ng 2011)
• Ramachandran, Lupiyya and Perry an acrhictecture to preserve cloud privacy (forthcoming)
![Page 37: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/37.jpg)
Internalising externalities
Trust
Zainab Al Jazaff has been working on this
cloud
Privacy
Regs
IP
Trust
![Page 38: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/38.jpg)
Trustor Trustee
Trust: “the willingness of a trustor to rely on a trustee to do what is promised in a given context, irrespective of the ability to monitor or control the trustee, and even though negative consequences may occur”
Introduction:
![Page 39: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/39.jpg)
Service Oriented Architecture (SOA)
![Page 40: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/40.jpg)
Ts= 5.7
Ts= /
Ts= 4
Service requestor Service registry
Services
Trust bootstrapping A mechanism to assign trust rate for a new service that its trustworthiness is unknown and before having any requestor interacted with it.
![Page 41: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/41.jpg)
Related
• Reputation bootstrapping • Assign default values (low, high, or average) • Rated by a participant, which has a high rate • A once rating approach • Rating based on the aggregated information • No trust bootstrapping for service providers
- Whitewashing - cold start - overhead on requestor side .
![Page 42: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/42.jpg)
Trust bootstrapping
• Trust metrics • Trust services • Trust service providers
Trust model: to evaluate trust rates
![Page 43: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/43.jpg)
Abbreviations • Terms: - Service: s - Service provider: pr - Trust Metrics: TM ( STM (OSTM, SSTM),
PTM).
• Trust rates: Ts ,Tpr ,TTM ,TOSTM ,TSSTM ,TPTM
![Page 44: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/44.jpg)
Trust Metrics ( TM ) Trust information on an entity that is required and used to evaluate the trustworthiness of the entity.
STM: Service Trust Metrics
PTM: Service Provider Trust Metrics
OSTM: Objective STM
SSTM: Subjective STM
Response Time
Throughput
Latency
Execution Time
Security
Privacy
Payment SatisfactionOutput/Item Satisfaction
Remedies
TM: Trust Metrics
Physical Location
Brand name
Web Site
Competence Honesty
Privacy
Security
Remedies
STM
Provider’s Properties
Important Clues
![Page 45: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/45.jpg)
![Page 46: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/46.jpg)
TM trust models ( TTM )
![Page 47: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/47.jpg)
Trust rating the Trust Metrics TTM
![Page 48: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/48.jpg)
STM: Service Trust Metrics
PTM: Service Provider Trust Metrics
OSTM: Objective STM
SSTM: Subjective STM
Response Time
Throughput
Latency
Execution Time
Security
Privacy
Payment SatisfactionOutput/Item Satisfaction
Remedies
TM: Trust Metrics
Physical Location
Brand name
Web Site
Competence Honesty
Privacy
Security
Remedies
STM
Provider’s Properties
Important Clues
![Page 49: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/49.jpg)
Trust rating OSTM
![Page 50: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/50.jpg)
![Page 51: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/51.jpg)
STM: Service Trust Metrics
PTM: Service Provider Trust Metrics
OSTM: Objective STM
SSTM: Subjective STM
Response Time
Throughput
Latency
Execution Time
Security
Privacy
Payment SatisfactionOutput/Item Satisfaction
Remedies
TM: Trust Metrics
Physical Location
Brand name
Web Site
Competence Honesty
Privacy
Security
Remedies
STM
Provider’s Properties
Important Clues
![Page 52: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/52.jpg)
• Feedback approach TSSTMout , TSSTMpym
• (based on user satisfaction)
• Certification approach TSSTMrem , TSSTMsec , TSSTMprv
Trust rating SSTM
![Page 53: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/53.jpg)
STM: Service Trust Metrics
PTM: Service Provider Trust Metrics
OSTM: Objective STM
SSTM: Subjective STM
Response Time
Throughput
Latency
Execution Time
Security
Privacy
Payment SatisfactionOutput/Item Satisfaction
Remedies
TM: Trust Metrics
Physical Location
Brand name
Web Site
Competence Honesty
Privacy
Security
Remedies
STM
Provider’s Properties
Important Clues
![Page 54: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/54.jpg)
• Feedback approach TPTMwsite , TPTMloc
• Trust rating the STM TPTMrem à TSSTMrem
TPTMsec à TSSTMsec TPTMprv à TSSTMprv
• Long term interactions: TPTMcomp ,TPTMhons ,TPTMbrand
Trust rating PTM
![Page 55: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/55.jpg)
TPTMcomp ,TPTMhons ,TPTMbrand
![Page 56: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/56.jpg)
![Page 57: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/57.jpg)
![Page 58: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/58.jpg)
Experiment
![Page 59: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/59.jpg)
![Page 60: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/60.jpg)
Requestors’ trust preferences:
![Page 61: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/61.jpg)
A few trust papers • 1-‐ Z. M. Aljazzaf, M. Perry, and M. A.M. Capretz. Trust in Web Services. IEEE 6th
World Congress on Services 2010, SERVICES 2010, pp. 189-‐190, Miami, FL, USA, 2010. IEEE Computer Society.
• 2-‐ Z. M. Aljazzaf, M. Perry, and M. A.M. Capretz. Online Trust: Defini7on and prin-‐ ciples. ICCGI 2010: The FiBh Interna7onal Mul7-‐Conference on Compu7ng in the Global Informa7on Technology, September 20-‐25, Valencia, Spain, 2010. IEEE Computer Society.
• 3-‐ Z. M. Aljazzaf, M. Perry, and M. A.M. Capretz. Trust Metrics for Services and Service Providers. ICIW 2011: The Sixth Interna7onal Conference on Internet and Web Applica7ons and Services, March 20-‐25, St. Maarten, The Netherlands An7lles, 2011.
• 4-‐ Z. M. Aljazzaf, M. Perry, and M. A.M. Capretz. Toward a Unified Trust Framework for Trust Establishment and Trust Based Service Selec7on. CCECE 2011: 24th Canadian Confer-‐ ence on Electrical and Computer Engineering, May 8-‐11, Niagara Falls, Ontario, Canada, 2011. IEEE Canada.
• 5-‐ Z. M. Aljazzaf, M. A.M. Capretz, and M. Perry. Trust Bootstrapping Services and Service Providers. PST 2011: The Ninth Annual Interna7onal Conference on Privacy, Security and Trust, July 19-‐21, Montreal, Quebec, Canada, 2011. IEEE Computer Society.
![Page 62: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/62.jpg)
Internalising externalities
Regulations
…working on this
cloud
Privacy
Regs
IP
Trust
![Page 63: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/63.jpg)
the problems • a bankruptcy filing by a cloud provider can have a major
impact on users, the service agreement may not qualify as “intellectual property” under s. 365(n) Bankruptcy Code;
• the legal status of personal and business informa7on (e.g., trade secrets) may be compromised or commingled with third party data, including that of compe7tors;
• businesses may be legally barred from placing certain types of informa7on on the cloud (e.g. legally privileged informa7on, health records, financial records);
• cloud providers may impose unreasonable privacy policies or terms of service;
Luis J. Diaz, Director in the Gibbons Intellectual Property Department
![Page 64: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/64.jpg)
rule 404?
• For example, can we ensure that cloud users are easily able to comply with the requirements to have internal controls and procedures for financial repor7ng and be able to document, test and maintain those controls and procedures to ensure their effec7veness??
![Page 65: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/65.jpg)
Rules
and regs
![Page 66: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/66.jpg)
and
• There are many other externali7es that will impact the opera7on of clouds –– planning to manage these inside the cloud, or at least think of interfaces for clouds, will give a long term advantage.
![Page 67: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/67.jpg)
Internalising externalities
Intellectual Property etc
…working on this
cloud
Privacy
Regs
IP
Trust
![Page 68: “InternalisingExternalies forImprovingCompung …...Internalising Externalities… (notably for Clouds) Mark Perry Professor, Computer Science Associate Dean Law Barrister and Solicitor](https://reader033.vdocument.in/reader033/viewer/2022041913/5e682c7757cb3136ff7ac16d/html5/thumbnails/68.jpg)
Thanks for listening & any questions? • See some publica7ons at :