Balancing Centralization and Decentralization in Cloud Data Management
The paper explores the risks associated with cloud storage, including centralization of personal identifiable information (PII), loss of assets, and potential identity theft. It contrasts these issues with a decentralized approach, highlighting the complexities and management challenges of such systems. The author proposes a compromise between extreme centralization and decentralization through a hybrid model that emphasizes data encryption, privacy-preserving advertising, and the necessary use of small, manageable data droplets. A unified API at both centralized and decentralized levels is suggested for improved resilience and privacy.
Balancing Centralization and Decentralization in Cloud Data Management
E N D
Presentation Transcript
Droplets:- Condensing the Cloud Jon Crowcroft, http://www.cl.cam.ac.uk/~jac22
From the Cloud… • The cloud has its risks…
Centralisation of PII • What if • Provider goes broke • Lose all your family photos • Assets sold to another (unknown) provider • In a large organisation, • There will always be someone bad • Who can datamine • Identity theft • And worse
To Droplets • At the other extreme…
A fully decentralised approach… • Can obviate cloud risks • But introduces complexity • Management overhead (p2p/manet/dtn) • Availability/resilience • Total data loss if device stolen • Can we compromise • Between extreme centralisation… • And extreme decentralisation?
Via extraction • Firstly, we need to pull/push data • From/to the cloud…
Replication/Decentralisation are necessary, but not sufficient… • Need to encrypt data • Both in Cloud • And in Mist • The mist is a collection of droplets - • small objects with key/capability • and auditor • What about cloud business models? • Use privacy preserving advertising (MPI) • Use k-anonymity and threshold security • Use differential privacy for market research
To Conclude… • Use contributed resources are fine • Home hub, phone, etc • But need to unify with cloud • Do so at API level • Have both decentralised and central • Advantages of both • Low latency access to home/pocket • High resilience in cloud • No loss of privacy if bad cloud/pick pocket