Steffen Müller,
David Bermbach,
Stefan Tai,
Frank Pallas

IEEE International Conference on Cloud Engineering (IC2E) 2014

Cloud storage services and NoSQL systems are optimized for performance and availability. Hence, enterprise- grade features like security mechanisms are typically neglected even though there is a need for them with increased cloud adoption by enterprises. Only Transport Layer Security (TLS) is frequently supported. Furthermore, the standard Transport Layer Security (TLS) protocol offers many configuration options which are usually chosen purely based on chance.

We argue that in cloud database systems, configuration options should be chosen based on the degree of vulnerability to attacks and security threats as well as on the performance overhead of the respective algorithms. Our contributions in this regard are a benchmarking approach for transparent analysis of the performance impact of various TLS configuration options in cloud database systems, as well as a custom TLS socket implementation which offers more fine-grained control over the configuration options chosen. We also use our benchmarking approach to study the performance impact of TLS in Amazon DynamoDB and Apache Cassandra.