Securing Database-as-a-Service: Issues and Compromises

Database-as-a-Service is an example of one of many services being marketed as part of Cloud Computing. This paper addresses several major issues and concerns related to Database-as-a-Service, including data security, trust, expectations, regulations, and performance issues. Some general proposed resolutions are mentioned, such as risk management and better contractual agreements, before the discussion is turned toward some solutions for Database-as-a-Service specifically. The majority of solutions cover database encryption and authenticity techniques. Finally, the authors briefly address some hardware security concerns and then finish with a discussion of compromise and the balance of trust and risk.