A Greedy Constructive Heuristic for Executing Cloud-Based Workflows with Data Confidentiality Restrictions
摘要
Over the past decade, many scientific experiments have shifted from on-premise environments to the cloud. While clouds offer flexibility, scalability, and cost-effectiveness, security, and confidentiality remain an issue. This is particularly true when experiments are modeled as workflows and executed using cloud-based workflow systems. These systems typically use multiple virtual machines (VMs) and shared cloud storage to execute the workflow and store the files generated during workflow execution. If these files are accessed by malicious users, they could reveal sensitive information about the workflow’s results or structure. To mitigate these risks, data dispersion and techniques such as encryption can be employed, but they need to be carefully integrated into the workflow scheduling process. For example, dispersing data to storage far from the processing VM may increase workflow makespan and costs. In this manuscript, we propose