    @incollection {nunez15privacy,
	title = {Privacy-Preserving Identity Management as a Service},
	booktitle = {Accountability and Security in the Cloud},
	series = {Lecture Notes in Computer Science},
	volume = {8937},
	year = {2015},
	pages = {114-125},
	publisher = {Springer International Publishing},
	organization = {Springer International Publishing},
	abstract = {<p>In this paper we tackle the problem of privacy and confidentiality in Identity Management as a Service (IDaaS). The adoption of cloud computing technologies by organizations has fostered the externalization of the identity management processes, shaping the concept of Identity Management as a Service. However, as it has happened to other cloud-based services, the cloud poses serious risks to the users, since they lose the control over their data. As part of this work, we analyze these concerns and present a model for privacy-preserving IDaaS, called BlindIdM, which is designed to provide data privacy protection through the use of cryptographic safeguards.</p>
},
	keywords = {Cloud Computing, Cryptography, Identity Management as a Service, privacy},
	isbn = {978-3-319-17198-2},
	doi = {10.1007/978-3-319-17199-9_5},
	url = {http://dx.doi.org/10.1007/978-3-319-17199-9_5},
	author = {David Nu{\~n}ez and Isaac Agudo and Javier Lopez},
	editor = {Massimo Felici and Carmen Fernandez-Gago}
}
@inproceedings {moyano14caise,
	title = {Trust-Aware Decision-Making Methodology for Cloud Sourcing},
	booktitle = {26th International Conference on Advanced Information Systems Engineering (CAiSE 2014)},
	series = {LCNS},
	volume = {8484},
	year = {2014},
	month = {06/2014},
	pages = {136-149},
	publisher = {Springer},
	organization = {Springer},
	address = {Thessaloniki},
	abstract = {<p>Cloud sourcing consists of outsourcing data, services and infrastructure to cloud providers. Even when this outsourcing model brings advantages to cloud customers, new threats also arise as sensitive data and critical IT services are beyond customers{\textquoteright} control. When an organization considers moving to the cloud, IT decision makers must select a cloud provider and must decide which parts of the organization will be outsourced and to which extent. This paper proposes a methodology that allows decision makers to evaluate their trust in cloud providers. The methodology provides a systematic way to elicit knowledge about cloud providers, quantify their trust factors and aggregate them into trust values that can assist the decision-making process. The trust model that we propose is based on trust intervals, which allow capturing uncertainty during the evaluation, and we define an operator for aggregating these trust intervals. The methodology is applied to an eHealth scenario.</p>
},
	keywords = {Cloud Computing, decision making, domain knowledge elicitation, security, Trust},
	isbn = {978-3-319-07880-9},
	issn = {0302-9743},
	doi = {10.1007/978-3-319-07881-6},
	author = {Francisco Moyano and Kristian Beckers and Carmen Fernandez-Gago},
	editor = {Matthias Jarke and John Mylopoulos and Christoph Quix and Colette Rolland and Yannis Manolopoulos and Haralambos Mouratidis and Jennifer Horkoff}
}
