Reconciling security and functional requirements in multi-Tenant cloudsGhassan O. KarameMatthias Neugschwandtneret al.2017ASIA CCS-SCC 2017