ref.bib

@inproceedings{bezemer2010multi,
title={Multi-tenant SaaS applications: maintenance dream or nightmare?},
author={Bezemer, Cor-Paul and Zaidman, Andy},
booktitle={Proceedings of the Joint ERCIM Workshop on Software Evolution (EVOL) and International Workshop on Principles of Software Evolution (IWPSE)},
pages={88--92},
year={2010},
organization={ACM},
howpublished = "\url{http://www.st.ewi.tudelft.nl/~zaidman/publications/bezemerIWPSE2010.pdf}",
},

@inproceedings{guo2007framework,
title={A framework for native multi-tenancy application development and management},
author={Guo, Chang Jie and Sun, Wei and Huang, Ying and Wang, Zhi Hu and Gao, Bo},
booktitle={E-Commerce Technology and the 4th IEEE International Conference on Enterprise Computing, E-Commerce, and E-Services, 2007. CEC/EEE 2007. The 9th IEEE International Conference on},
pages={551--558},
year={2007},
organization={IEEE},
howpublished = "\url{http://ieeexplore.ieee.org/ielx5/4285175/4285176/04285271.pdf?tp=&arnumber=4285271&isnumber=4285176}",
},

@inproceedings{bezemer2010enabling,
title={Enabling multi-tenancy: An industrial experience report},
author={Bezemer, C-P and Zaidman, Andy and Platzbeecker, Bart and Hurkmans, Toine and t Hart, A},
booktitle={Software Maintenance (ICSM), 2010 IEEE International Conference on},
pages={1--8},
year={2010},
organization={IEEE},
howpublished = "\url{http://swerl.tudelft.nl/twiki/pub/Main/TechnicalReports/TUD-SERG-2010-030.pdf}",
},

@article{krebs2013metrics,
  title={Metrics and techniques for quantifying performance isolation in cloud environments},
  author={Krebs, Rouven and Momm, Christof and Kounev, Samuel},
  journal={Science of Computer Programming},
  year={2013},
  publisher={Elsevier}
}

@article{espadas2013tenant,
title={A tenant-based resource allocation model for scaling Software-as-a-Service applications over cloud computing infrastructures},
author={Espadas, Javier and Molina, Arturo and Jim{\'e}nez, Guillermo and Molina, Mart{\'\i}n and Ram{\'\i}rez, Ra{\'u}l and Concha, David},
journal={Future Generation Computer Systems},
volume={29},
number={1},
pages={273--286},
year={2013},
publisher={Elsevier},
howpublished="\url{http://ac.els-cdn.com/S0167739X1100210X/1-s2.0-S0167739X1100210X-main.pdf?_tid=33d735d4-9499-11e3-bb93-00000aacb360&acdnat=1392287327_57706e8653394edc65a8a893b8fe363a}"
},

% cited by: 107 (15 feb 2014)
% How variability modeling techniques from software product line engineering
% can support SaaS providers in managing the variability of SaaS applications
% and their requirements.
% Specifically, we propose using explicit variability models to systematically 
% derive customization and deployment information for individual SaaS tenants. 
% We also demonstrate how variability models could be used to systematically 
% consider information about already deployed SaaS applications for efficiently
% deploying SaaS applications for new tenants. We illustrate our approach by a
% running example for a meeting planning application.
@inproceedings{mietzner2009variability,
title={Variability modeling to support customization and deployment of multi-tenant-aware Software as a Service applications},
author={Mietzner, Ralph and Metzger, Andreas and Leymann, Frank and Pohl, Klaus},
booktitle={Proceedings of the 2009 ICSE Workshop on Principles of Engineering Service Oriented Systems},
pages={18--25},
year={2009},
organization={IEEE Computer Society}
},

@incollection{kabbedijk2011variability,
  title={Variability in multi-tenant environments: architectural design patterns from industry},
  author={Kabbedijk, Jaap and Jansen, Slinger},
  booktitle={Advances in conceptual modeling. recent developments and new directions},
  pages={151--160},
  year={2011},
  publisher={Springer}
}

@article{svahnberg2005taxonomy,
  title={A taxonomy of variability realization techniques},
  author={Svahnberg, Mikael and Van Gurp, Jilles and Bosch, Jan},
  journal={Software: Practice and Experience},
  volume={35},
  number={8},
  pages={705--754},
  year={2005},
  publisher={Wiley Online Library}
}

@inproceedings{sun2008software,
  title={Software as a service: Configuration and customization perspectives},
  author={Sun, Wei and Zhang, Xin and Guo, Chang Jie and Sun, Pei and Su, Hui},
  booktitle={Congress on Services Part II, 2008. SERVICES-2. IEEE},
  pages={18--25},
  year={2008},
  organization={IEEE}
}

@inproceedings{mietzner2008defining,
  title={Defining composite configurable SaaS application packages using SCA, variability descriptors and multi-tenancy patterns},
  author={Mietzner, Ralph and Leymann, Frank and Papazoglou, Mike P},
  booktitle={Internet and Web Applications and Services, 2008. ICIW'08. Third International Conference on},
  pages={156--161},
  year={2008},
  organization={IEEE}
}

@inproceedings{schroeter2012towards,
  title={Towards modeling a variable architecture for multi-tenant SaaS-applications},
  author={Schroeter, Julia and Cech, Sebastian and G{\"o}tz, Sebastian and Wilke, Claas and A{\ss}mann, Uwe},
  booktitle={Proceedings of the sixth international workshop on variability modeling of software-intensive systems},
  pages={111--120},
  year={2012},
  organization={ACM}
}

@incollection{walraven2011middleware,
  title={A middleware layer for flexible and cost-efficient multi-tenant applications},
  author={Walraven, Stefan and Truyen, Eddy and Joosen, Wouter},
  booktitle={Middleware 2011},
  pages={370--389},
  year={2011},
  publisher={Springer}
}

@inproceedings{truyen2012context,
  title={Context-oriented programming for customizable SaaS applications},
  author={Truyen, Eddy and Cardozo, Nicol{\'a}s and Walraven, Stefan and Vallejos, Jorge and Bainomugisha, Engineer and G{\"u}nther, Sebastian and D'Hondt, Theo and Joosen, Wouter},
  booktitle={Proceedings of the 27th annual acm symposium on applied computing},
  pages={418--425},
  year={2012},
  organization={ACM}
}

@incollection{jansen2010customization,
  title={Customization realization in multi-tenant web applications: case studies from the library sector},
  author={Jansen, Slinger and Houben, Geert-Jan and Brinkkemper, Sjaak},
  booktitle={Web Engineering},
  pages={445--459},
  year={2010},
  publisher={Springer}
}

% extra paper needed to explain decision modeling that was mentioned by Schrouter et al.
@article{schmid2004customizable,
  title={A customizable approach to full lifecycle variability management},
  author={Schmid, Klaus and John, Isabel},
  journal={Science of Computer Programming},
  volume={53},
  number={3},
  pages={259--284},
  year={2004},
  publisher={Elsevier}
}

% Bonuspaper for definition(s) of scalability.
@inproceedings{bondi2000scalability,
  title={Characteristics of scalability and their impact on performance},
  author={Bondi},
  booktitle={Proceedings of the 2nd international workshop on Software and performance},
  pages={195--203},
  year={2000},
  organization={ACM}
}

@inproceedings{shen2011cloudscale,
  author = {Shen, Zhiming and Subbiah, Sethuraman and Gu, Xiaohui and Wilkes, John},
  title = {CloudScale: Elastic Resource Scaling for Multi-tenant Cloud Systems},
  booktitle = {Proceedings of the 2Nd ACM Symposium on Cloud Computing},
  year = {2011},
  pages = {5:1--5:14},
  publisher = {ACM}
}

@inproceedings{krebs2012architecture,
  author = {Krebs, Rouven and Momm, Christof and Kounev, Samuel},
  booktitle = {{Proceedings of the 2nd International Conference on Cloud Computing and Services Science (CLOSER 2012)}},
  day = {18--21},
  location = {Setubal, Portugal},
  month = {April},
  pdf = {http://sdqweb.ipd.kit.edu/publications/pdfs/KrMoKo2012-closer-multitenant-sass.pdf},
  publisher = {SciTePress},
  title = {{Architectural Concerns in Multi-Tenant SaaS Applications}},
  year = {2012}
}

@inproceedings{dillon2010cloud,
  title={Cloud computing: issues and challenges},
  author={Dillon, Tharam and Wu, Chen and Chang, Elizabeth},
  booktitle={Advanced Information Networking and Applications (AINA), 2010 24th IEEE International Conference on},
  pages={27--33},
  year={2010},
  organization={Ieee}
}

@inproceedings{aulbach2009comparison,
  title={A comparison of flexible schemas for software as a service},
  author={Aulbach, Stefan and Jacobs, Dean and Kemper, Alfons and Seibold, Michael},
  booktitle={Proceedings of the 2009 ACM SIGMOD International Conference on Management of data},
  pages={881--888},
  year={2009},
  organization={ACM}
}

@inproceedings{aulbach2008multi,
  title={Multi-tenant databases for software as a service: schema-mapping techniques},
  author={Aulbach, Stefan and Grust, Torsten and Jacobs, Dean and Kemper, Alfons and Rittinger, Jan},
  booktitle={Proceedings of the 2008 ACM SIGMOD international conference on Management of data},
  pages={1195--1206},
  year={2008},
  organization={ACM}
}

@inproceedings{schiller2011native,
  title={Native support of multi-tenancy in RDBMS for software as a service},
  author={Schiller, Oliver and Schiller, Benjamin and Brodt, Andreas and Mitschang, Bernhard},
  booktitle={Proceedings of the 14th international conference on extending database technology},
  pages={117--128},
  year={2011},
  organization={ACM}
}

@inproceedings{aulbach2011extensibility,
  title={Extensibility and data sharing in evolving multi-tenant databases},
  author={Aulbach, Stefan and Seibold, Michael and Jacobs, Dean and Kemper, Alfons},
  booktitle={Data engineering (icde), 2011 ieee 27th international conference on},
  pages={99--110},
  year={2011},
  organization={IEEE}
}


@incollection{kwok2008resource,
  title={Resource calculations with constraints, and placement of tenants and instances for multi-tenant SaaS applications},
  author={Kwok, Thomas and Mohindra, Ajay},
  booktitle={Service-Oriented Computing--ICSOC 2008},
  pages={633--648},
  year={2008},
  publisher={Springer}
}

@article{Calero2010Auth,
  title={Toward a Multi-Tenancy Authorization System for Cloud Services.},
  author={Calero, Jose M Alcaraz and Edwards, Nigel and Kirschnick, Johannes and Wilcock, Lawrence and Wray, Mike},
  journal={IEEE Security \& Privacy},
  volume={8},
  number={6},
  pages={48--55},
  year={2010}
}

@article{Bernabe2012Auth,
  title={Semantic-aware multi-tenancy authorization system for cloud architectures},
  author={Bernal Bernabe, Jorge and Marin Perez, Juan M and Alcaraz Calero, Jose M and Garcia Clemente, Felix J and Martinez Perez, Gregorio and Gomez Skarmeta, Antonio F},
  journal={Future Generation Computer Systems},
  volume={32},
  pages={154--167},
  year={2014},
  publisher={Elsevier}
}

@inproceedings{Jasti2010Security,
  title={Security in multi-tenancy cloud},
  author={Jasti, Amarnath and Shah, Payal and Nagaraj, Rajeev and Pendse, Ravi},
  booktitle={Security Technology (ICCST), 2010 IEEE International Carnahan Conference on},
  pages={35--41},
  year={2010},
  organization={IEEE}
}

@article{Subashini2011Security,
  title={A survey on security issues in service delivery models of cloud computing},
  author={Subashini, S and Kavitha, V},
  journal={Journal of Network and Computer Applications},
  volume={34},
  number={1},
  pages={1--11},
  year={2011},
  publisher={Elsevier}
}

@article{Merino2011Security,
  title={Building safe PaaS clouds: A survey on security in multitenant software platforms},
  author={Rodero-Merino, Luis and Vaquero, Luis M and Caron, Eddy and Muresan, Adrian and Desprez, Fr{\'e}d{\'e}ric},
  journal={computers \& security},
  volume={31},
  number={1},
  pages={96--108},
  year={2012},
  publisher={Elsevier}
}

@article{Hashizume2013Security,
  title={An analysis of security issues for cloud computing},
  author={Hashizume, Keiko and Rosado, David G and Fern{\'a}ndez-Medina, Eduardo and Fernandez, Eduardo B},
  journal={Journal of Internet Services and Applications},
  volume={4},
  number={1},
  pages={1--13},
  year={2013},
  publisher={Springer}
}

@inproceedings{Takahashi2012Security,
  title={Enabling Secure Multitenancy in Cloud Computing: Challenges and Approaches},
  author={Takeshi Takahashi and Gregory Blanc and Youki Kadobayashi and Doudou Fall and Hiroaki Hazeyama and Shin’ichiro Matsuo},
  publisher={IEEE},
  year={2012},
  booktitle={2012 2nd Baltic Congress on Future Internet Communications},
  pages={72--78}
}

@misc{Ormandy2007Security,
  title={An empirical study into the security exposure to hosts of hostile virtualized environments},
  author={Ormandy, Tavis},
  year={2007},
  publisher={Citeseer}
}

@inproceedings{walraven2012towards,
  title={Towards performance isolation in multi-tenant SaaS applications},
  author={Walraven, Stefan and Monheim, Tanguy and Truyen, Eddy and Joosen, Wouter},
  booktitle={Proceedings of the 7th Workshop on Middleware for Next Generation Internet Computing},
  pages={6},
  year={2012},
  organization={ACM}
}


@inproceedings{lin2009feedback,
  title={Feedback-control-based performance regulation for multi-tenant applications},
  author={Lin, Hailue and Sun, Kai and Zhao, Shuan and Han, Yanbo},
  booktitle={Parallel and Distributed Systems (ICPADS), 2009 15th International Conference on},
  pages={134--141},
  year={2009},
  organization={IEEE}
}

% To explain "well established"-models in Variability Modeling we need a lot of papers
% 300+ times citated
@article{benavides2010automated, 
  title={Automated analysis of feature models 20 years later: A literature review},
  author={Benavides, David and Segura, Sergio and Ruiz-Cort{\'e}s, Antonio},
  journal={Information Systems},
  volume={35},
  number={6},
  pages={615--636},
  year={2010},
  publisher={Elsevier}
}
% 3000+ times citated
@techreport{kang1990feature, 
  title={Feature-oriented domain analysis (FODA) feasibility study},
  author={Kang, Kyo C and Cohen, Sholom G and Hess, James A and Novak, William E and Peterson, A Spencer},
  year={1990},
  institution={DTIC Document}
}
@inproceedings{schmid2011comparison,
  title={A comparison of decision modeling approaches in product lines},
  author={Schmid, Klaus and Rabiser, Rick and Gr{\"u}nbacher, Paul},
  booktitle={Proceedings of the 5th Workshop on Variability Modeling of Software-Intensive Systems},
  pages={119--126},
  year={2011},
  organization={ACM}
}
@incollection{lauenroth2005software,
  year={2005},
  booktitle={Software Product Line Engineering},
  title={Principles of Variability},
  publisher={Springer Berlin Heidelberg},
  author={Lauenroth, Kim and Pohl, Klaus},
  pages={57-88}
}

@inproceedings{tsai2010towards,
  title={Towards a scalable and robust multi-tenancy SaaS},
  author={Tsai, Wei-Tek and Shao, Qihong and Huang, Yu and Bai, Xiaoying},
  booktitle={Proceedings of the Second Asia-Pacific Symposium on Internetware},
  pages={8},
  year={2010},
  organization={ACM}
}

@Misc{saxena10kudzu,
author = {Prateek Saxena and Steve Hanna and Pongsin Poosankam and Dawn Song},
title = {FLAX: Systematic Discovery of Client-side Validation Vulnerabilities in Rich Web Applications},
booktitle = {Proc. of the 17th Annual Network and Distributed System Security Symposium (NDSS)},
year = {2010},
}

@inproceedings{curtsinger2011zozzle,
 author = {Curtsinger, Charlie and Livshits, Benjamin and Zorn, Benjamin and Seifert, Christian},
 title = {ZOZZLE: Fast and Precise In-browser JavaScript Malware Detection},
 booktitle = {Proceedings of the 20th USENIX Conference on Security},
 series = {SEC'11},
 year = {2011},
 location = {San Francisco, CA},
 pages = {3--3},
 numpages = {1},
 url = {http://dl.acm.org/citation.cfm?id=2028067.2028070},
 acmid = {2028070},
 publisher = {USENIX Association},
 address = {Berkeley, CA, USA},
} 

@book{walls2005spring,
  title={Spring in action},
  author={Walls, Craig and Breidenbach, Ryan},
  year={2005},
  publisher={Dreamtech Press}
}

@book{vanbrabant2008google,
  title={Google Guice: Agile Lightweight Dependency Injection Framework},
  author={Vanbrabant, Robbie},
  year={2008},
  publisher={Apress}
}

@inproceedings{copeland1985decomposition,
  title={A decomposition storage model},
  author={Copeland, George P and Khoshafian, Setrag N},
  booktitle={ACM SIGMOD Record},
  volume={14},
  pages={268--279},
  year={1985},
  organization={ACM}
}

@article{Seccombe2009Security,
  title={Security guidance for critical areas of focus in cloud computing, v2. 1},
  author={Seccombe, A and Hutton, A and Meisel, A and Windel, A and Mohammed, A and Licciardi, A and others},
  journal={Cloud Security Alliance},
  year={2009}
}

@inproceedings{Wang2009Security,
title={Ensuring data storage security in cloud computing},
author={Wang C, Wang Q, Ren K.},
journal={Cryptology ePrint Archive},
year={2009},
},

@misc{Softlayer2009Security,
  title={Service Level Agreement and Master Service Agreement},
  Author={Softlayer},
  year={2009},
  howpublished ={\url{http://cdn.softlayer.com/SoftLayer_MH_Agreement.pdf}},
},

@techreport{Wade2008Security,
  title={Verizon Business 2008 data breach investigation report},
  author={Wade HB, David Hylender C, Andrew Valentine J.},
  year={2008},
  institution={Verizon},
  howpublished={\url{http://www.verizonbusiness.com/resources/security/databreachreport.pdf}},
},

@inproceedings{dumitracs2009upgrades,
  title={Why do upgrades fail and what can we do about it?: toward dependable, online upgrades in enterprise system},
  author={Dumitra{\c{s}}, Tudor and Narasimhan, Priya},
  booktitle={Proceedings of the 10th ACM/IFIP/USENIX International Conference on Middleware},
  pages={18},
  year={2009},
  organization={Springer-Verlag New York, Inc.}
},

@inproceedings{metzger2007disambiguating,
  title={Disambiguating the documentation of variability in software product lines: A separation of concerns, formalization and automated analysis},
  author={Metzger, Andreas and Pohl, Klaus and Heymans, Patrick and Schobbens, P and Saval, Germain},
  booktitle={Requirements Engineering Conference, 2007. RE'07. 15th IEEE International},
  pages={243--253},
  year={2007},
  organization={IEEE}
}

@inproceedings{mietzner2008generation,
  title={Generation of BPEL customization processes for SaaS applications from variability descriptors},
  author={Mietzner, Ralph and Leymann, Frank},
  booktitle={Services Computing, 2008. SCC'08. IEEE International Conference on},
  volume={2},
  pages={359--366},
  year={2008},
  organization={IEEE}
}

% interessant QoS paper
@inproceedings{cheng2009multi,
  title={A multi-tenant oriented performance monitoring, detecting and scheduling architecture based on SLA},
  author={Cheng, Xu and Shi, Yuliang and Li, Qingzhong},
  booktitle={Pervasive Computing (JCPC), 2009 Joint Conferences on},
  pages={599--604},
  year={2009},
  organization={IEEE}
}

@inproceedings{wang2008study,
  title={A study and performance evaluation of the multi-tenant data tier design patterns for service oriented computing},
  author={Wang, Zhi Hu and Guo, Chang Jie and Gao, Bo and Sun, Wei and Zhang, Zhen and An, Wen Hao},
  booktitle={e-Business Engineering, 2008. ICEBE'08. IEEE International Conference on},
  pages={94--101},
  year={2008},
  organization={IEEE}
}

@inproceedings{Johnson1996Law,
  title={Law and Borders: The Rise of Law in Cyberspace},
  author={David R. Johnson and David Post},
  booktitle={Stanford Law Review},
  pages={1367--1402},
  year={1996},
}

@inproceedings{Mahmood2011Security,
  title={Data Location and Security Issues in Cloud Computing},
  author={Mahmood, Zaigham},
  booktitle={Emerging Intelligent Data and Web Technologies (EIDWT), 2011 International Conference on},
  pages={49--54},
  year={2011},
  organization={IEEE}
}
  

@inproceedings{Chen2012Security,
  title={Data security and privacy protection issues in cloud computing},
  author={Chen, Deyan and Zhao, Hong},
  booktitle={Computer Science and Electronics Engineering (ICCSEE), 2012 International Conference on},
  volume={1},
  pages={647--651},
  year={2012},
  organization={IEEE}
}

@article{chong2006multi,
  title={Multi-tenant data architecture},
  author={Chong, Frederick and Carraro, Gianpaolo and Wolter, Roger},
  journal={MSDN Library, Microsoft Corporation},
  year={2006},
  note="[Online]. Available: \url{http://msdn.microsoft.com/en-us/library/aa479086.aspx}. [Accessed March 19, 2014]"
}

@article{Sandhu1996Auth,
  title={Role-Based Access Control Models yz},
  author={Sandhu, Ravi S and Coynek, Edward J and Feinsteink, Hal L and Youmank, Charles E},
  journal={IEEE computer},
  volume={29},
  number={2},
  pages={38--47},
  year={1996}
}