An Autonomic Framework for Integrating Security and Quality of Service Support in Databases

The back-end databases of multi-tiered applications are a major data security concern for enterprises. The problem becomes more critical with the proliferation of enterprise hosted web applications in the cloud. At the same time, an e-business application needs to process requests with a certain service quality to maintain current customers and attract new ones. While prior work has concentrated on securing applications and providing quality of service (QoS) independently, little work has focused on integrating security and QoS support for business applications, in which the system can manage the security and QoS requirements automatically in a way that preserves the security and QoS goals. This paper focuses on designing an autonomic controller for databases that integrates the security requirements with QoS requirements in order to ease the management burden of system administrators by automatically varying security configurations that meet the system performance and security objectives.