Expressing and enforcing location requirements in the cloud using information flow control

Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015

Volumn , Issue , 2015, Pages 410-415

  Pasquier, Thomas F J M ^a   Powles, Julia E ^a  

^a UNIVERSITY OF CAMBRIDGE   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

CLOUD COMPUTING; COMPLIANCE CONTROL; FLOW CONTROL; LOCATION;

AUDIT TRAILS; CLOUD SERVICES; DATA FLOW; GEOGRAPHIC LOCATION; INFORMATION FLOW CONTROL; REGULATORY ISSUES; TECHNICAL SOLUTIONS;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 84942456663     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IC2E.2015.71     Document Type: Conference Paper

References (37)

1. J. Bacon, D. Eyers, T. Pasquier, J. Singh, I. Papagiannis, and P. Pietzuch, "Information Flow Control for Secure Cloud Computing", IEEE TNSM SI Cloud Service Management, vol. 11, no. 1, pp. 76-89, March 2014.
2. C. J. Millard, Ed., Cloud Computing Law. oup, 2013.
3. "European Commission: Proposal for a General Data Protection Regulation, 2012/0011 (cod), c7-0025/12, Brussels com (2012) 11 final", 2012.
4. K. Hon, C. Millard, C. Reed, J. Singh, I. Walden, and J. Crowcroft, "Policy, Legal and Regulatory Implications of a Europe-Only Cloud", Queen Mary University of London, School of Law, Tech. Rep., 2014. [Online]. Available: http://papers.ssrn. com/sol3/Delivery.cfm/SSRN ID2527951 code1577160.pdf
5. J. Singh, J. Bacon, J. Crowcroft, A. Madhavapeddy, T. Pasquier, W. K. Hon, and C. Millard, "Regional Clouds: Technical Considerations", University of Cambridge, Computer Laboratory, Tech. Rep. UCAM-CL-TR-863, 2014. [Online]. Available: http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-863.pdf
6. Article 29 Data Protection Working Party, "Opinion 05/2012 on Cloud Computing", 2012.
7. "French Military Programmation Law 2013-1168", 2013.
8. "usa patriot Act", 2001.
9. "UK Data Retention and Investigatory Powers Act", 2014.
10. "Microsoft Corp. v. United States, No. 14-2985, am. notice of appeal 2nd Cir." 10 Sept. 2014.
11. Article 29 Data Protection Working Party, "Guidelines on Implementation of the Court of Justice of the European Union Judgement on " Google Spain and INC V. Agencia Espanola de proteccion de datos (AEPD) and Mario Costeja Gonzalez" C-131/12", 2014.
12. R. S. Sandhu, "Lattice-based Access Control Models", Computer, vol. 26, no. 11, pp. 9-19, 1993.
13. K.-M. Chung, Y. Kalai, and S. Vadhan, "Improved Delegation of Computation Using Fully Homomorphic Encryption", in Advances in Cryptology-CRYPTO 2010. Springer, 2010, pp. 483-501.
14. "UK Regulation of Investigatory Powers Act", 2000.
15. M. Krohn, A. Yip, M. Brodsky, N. Cliffer, M. F. Kaashoek, E. Kohler, and R. Morris, "Information Flow Control for Standard OS Abstractions", in 21st ACM Symposium on Operating Systems Principles, 2007, pp. 321-334.
16. T. F. J.-M. Pasquier, J. Bacon, and D. Eyers, "FlowK: Information Flow Control for the Cloud", in 6th International Conference on Cloud Computing Technology and Science (CloudCom). IEEE, Dec. 2014.
17. N. Zeldovich, S. Boyd-Wickizer, and D. Mazières, "Securing Distributed Systems with Information Flow Control", in 5th USENIX Symposium on Networked System Design and Implementation, 2008, pp. 293-308.
18. J. Singh, T. Pasquier, J. Bacon, and D. Eyers, "Integrating Middleware with Information Flow Control", in International Conference on Cloud Engineering (IC2E). IEEE, 2015.
19. D. Schultz and B. Liskov, "IFDB: Decentralized Information Flow Control for Databases", in 8th ACM European Conference on Computer Systems (Eurosys). ACM, 2013, pp. 43-56.
20. D. E. Bell and L. J. LaPadula, "Secure Computer Systems: Mathematical Foundations and Model", The MITRE Corp., Bedford MA, Tech. Rep. M74-244, May 1973.
21. K. J. Biba, "Integrity Considerations for Secure Computer Systems", MITRE Corp., Tech. Rep. ESD-TR 76-372, 1977.
22. M. Armbrust, A. Fox, R. Griffith, A. D. Joseph, R. Katz, A. Konwinski, G. Lee, D. Patterson, A. Rabkin, I. Stoica et al., "A View of Cloud Computing", Communications of the ACM, vol. 53, no. 4, pp. 50-58, 2010.
23. R. Buyya, C. S. Yeo, and S. Venugopal, "Market-oriented Cloud Computing: Vision, Hype, and Reality for Delivering IT Services as Computing Utilities", in 10th IEEE International Conference on High Performance Computing and Communications. IEEE, 2008, pp. 5-13.
24. D. Armstrong and K. Djemame, "Towards Quality of Service in the Cloud", in 25th UK Performance Engineering Workshop, 2009.
25. R. K. Ko, M. Kirchberg, and B. S. Lee, "From System-centric to Datacentric Logging-accountability, Trust & Security in Cloud Computing", in Defense Science Research Conference and Expo (DSR), 2011. IEEE, 2011, pp. 1-4.
26. K. R. Jayaram, D. Safford, U. Sharma, V. Naik, D. Pendarakis, and S. Tao, "Trustworthy Geographically Fenced Hybrid Clouds", in ACM/IFIP/Usenix Middleware. ACM, 2014.
27. M. Henze, R. Hummen, and K. Wehrle, "The Cloud Needs Cross-Layer Data Handling Annotations", in Security and Privacy Workshops (SPW). IEEE, 2013, pp. 18-22.
28. Y. Mundada, A. Ramachandran, and N. Feamster, "Silverline: Data and network isolation for cloud services", Proc. of HotCloud, 2011.
29. "Software Guard Extensions Programming Reference", Intel, Tech. Rep. 329298-001US, 2013. [Online]. Available: https://software.intel. com/sites/default/files/329298-001.pdf
30. J. S. Dwoskin and R. B. Lee, "Hardware-rooted Trust for Secure Key Management and Transient Trust", in 14th ACM conference on Computer and communications security. ACM, 2007, pp. 389-400.
31. A. Baumann, M. Peinado, and G. Hunt, "Shielding Applications from an Untrusted Cloud with Haven", in Proceedings of the 11th USENIX conference on Operating Systems Design and Implementation. USENIX Association, 2014, pp. 267-283.
32. S. A. Crosby and D. S. Wallach, "Efficient Data Structures For Tamper-Evident Logging", in USENIX Security Symposium, 2009, pp. 317-334.
33. C. N. Chong, Z. Peng, and P. H. Hartel, Secure Audit Logging with Tamper-resistant Hardware. Springer, 2003.
34. T. F. J.-M. Pasquier, J. Bacon, and B. Shand, "FlowR: Aspect Oriented Programming for Information Flow Control in Ruby", in 13th International Conference on Modularity. ACM, April 2014.
35. W. Cheng, D. R. K. Ports, D. Schultz, V. Popic, A. Blankstein, J. Cowling, D. Curtis, L. Shrira, and B. Liskov, "Abstractions for Usable Information Flow Control in Aeolus", in Proc. USENIX Annual Technical Conference, Boston, 2012.
36. A. Alghothami and F. Kammuller, "Network Information Flow Control: Proof of Concept", in Systems, Man, and Cybernetics (SMC), 2013 IEEE International Conference on, Oct. 2013, pp. 2957-2962.
37. I. Roy, D. E. Porter, M. D. Bond, K. S. McKinley, and E. Witchel, "Laminar: Practical Fine-grained Decentralized Information Flow Control", SIGPLAN Not., vol. 44, no. 6, pp. 63-74, Jun. 2009.