Expressing and enforcing location requirements in the cloud using information flow control

Thomas F.J.M. Pasquier; Julia E. Powles

doi:10.1109/IC2E.2015.71

Expressing and enforcing location requirements in the cloud using information flow control

Thomas F.J.M. Pasquier, Julia E. Powles

Research output: Chapter in Book/Report/Conference proceeding › Conference Contribution (Conference Proceeding)

18 Citations (Scopus)

Abstract

The adoption of cloud computing is increasing and its use is becoming widespread in many sectors. As cloud service provision increases, legal and regulatory issues become more significant. In particular, the international nature of cloud provision raises concerns over the location of data and the laws to which they are subject. In this paper we investigate Information Flow Control (IFC) as a possible technical solution to expressing, enforcing and demonstrating compliance of cloud computing systems with policy requirements inspired by data protection and other laws. We focus on geographic location of data, since this is the paradigmatic concern of legal/regulatory requirements on cloud computing and, to date, has not been met with robust technical solutions and verifiable data flow audit trails.

Original language	English
Title of host publication	Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015
Publisher	Institute of Electrical and Electronics Engineers (IEEE)
Pages	410-415
Number of pages	6
ISBN (Electronic)	9781479982189
DOIs	https://doi.org/10.1109/IC2E.2015.71
Publication status	Published - 1 Jan 2015
Event	2015 IEEE International Conference on Cloud Engineering, IC2E 2015 - Tempe, United States Duration: 9 Mar 2015 → 12 Mar 2015

Conference

Conference	2015 IEEE International Conference on Cloud Engineering, IC2E 2015
Country/Territory	United States
City	Tempe
Period	9/03/15 → 12/03/15

Access to Document

10.1109/IC2E.2015.71

Handle.net

Persistent link

Cite this

@inproceedings{4fcd0ed6a94c48c88c634dd19ccee87f,

title = "Expressing and enforcing location requirements in the cloud using information flow control",

abstract = "The adoption of cloud computing is increasing and its use is becoming widespread in many sectors. As cloud service provision increases, legal and regulatory issues become more significant. In particular, the international nature of cloud provision raises concerns over the location of data and the laws to which they are subject. In this paper we investigate Information Flow Control (IFC) as a possible technical solution to expressing, enforcing and demonstrating compliance of cloud computing systems with policy requirements inspired by data protection and other laws. We focus on geographic location of data, since this is the paradigmatic concern of legal/regulatory requirements on cloud computing and, to date, has not been met with robust technical solutions and verifiable data flow audit trails.",

author = "Pasquier, \{Thomas F.J.M.\} and Powles, \{Julia E.\}",

year = "2015",

month = jan,

day = "1",

doi = "10.1109/IC2E.2015.71",

language = "English",

pages = "410--415",

booktitle = "Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

address = "United States",

note = "2015 IEEE International Conference on Cloud Engineering, IC2E 2015 ; Conference date: 09-03-2015 Through 12-03-2015",

}

Pasquier, TFJM & Powles, JE 2015, Expressing and enforcing location requirements in the cloud using information flow control. in Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015., 7092953, Institute of Electrical and Electronics Engineers (IEEE), pp. 410-415, 2015 IEEE International Conference on Cloud Engineering, IC2E 2015, Tempe, United States, 9/03/15. https://doi.org/10.1109/IC2E.2015.71

Expressing and enforcing location requirements in the cloud using information flow control. / Pasquier, Thomas F.J.M.; Powles, Julia E.
Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015. Institute of Electrical and Electronics Engineers (IEEE), 2015. p. 410-415 7092953.

Research output: Chapter in Book/Report/Conference proceeding › Conference Contribution (Conference Proceeding)

TY - GEN

T1 - Expressing and enforcing location requirements in the cloud using information flow control

AU - Pasquier, Thomas F.J.M.

AU - Powles, Julia E.

PY - 2015/1/1

Y1 - 2015/1/1

N2 - The adoption of cloud computing is increasing and its use is becoming widespread in many sectors. As cloud service provision increases, legal and regulatory issues become more significant. In particular, the international nature of cloud provision raises concerns over the location of data and the laws to which they are subject. In this paper we investigate Information Flow Control (IFC) as a possible technical solution to expressing, enforcing and demonstrating compliance of cloud computing systems with policy requirements inspired by data protection and other laws. We focus on geographic location of data, since this is the paradigmatic concern of legal/regulatory requirements on cloud computing and, to date, has not been met with robust technical solutions and verifiable data flow audit trails.

AB - The adoption of cloud computing is increasing and its use is becoming widespread in many sectors. As cloud service provision increases, legal and regulatory issues become more significant. In particular, the international nature of cloud provision raises concerns over the location of data and the laws to which they are subject. In this paper we investigate Information Flow Control (IFC) as a possible technical solution to expressing, enforcing and demonstrating compliance of cloud computing systems with policy requirements inspired by data protection and other laws. We focus on geographic location of data, since this is the paradigmatic concern of legal/regulatory requirements on cloud computing and, to date, has not been met with robust technical solutions and verifiable data flow audit trails.

UR - https://www.scopus.com/pages/publications/84942456663

U2 - 10.1109/IC2E.2015.71

DO - 10.1109/IC2E.2015.71

M3 - Conference Contribution (Conference Proceeding)

AN - SCOPUS:84942456663

SP - 410

EP - 415

BT - Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015

PB - Institute of Electrical and Electronics Engineers (IEEE)

T2 - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015

Y2 - 9 March 2015 through 12 March 2015

ER -

Expressing and enforcing location requirements in the cloud using information flow control

Abstract

Conference

Access to Document

Handle.net

Other files and links

Fingerprint

Cite this