Information flow control for strong protection with flexible sharing in PaaS

Thomas F.J.M. Pasquier; Jatinder Singh; Jean Bacon

doi:10.1109/IC2E.2015.64

Information flow control for strong protection with flexible sharing in PaaS

Thomas F.J.M. Pasquier, Jatinder Singh, Jean Bacon

Department of Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference Contribution (Conference Proceeding)

13 Citations (Scopus)

Abstract

The need to share data across applications is becoming increasingly evident. Current cloud isolation mechanisms focus solely on protection, such as containers that isolate at the OS-level, and virtual machines that isolate through the hypervisor. However, by focusing rigidly on protection, these approaches do not provide for controlled sharing. This paper presents how Information Flow Control (IFC) offers a flexible alternative. As a data-centric mechanism it enables strong isolation when required, while providing continuous, fine grained control of the data being shared. An IFC-enabled cloud platform would ensure that policies are enforced as data flows across all applications, without requiring any special sharing mechanisms.

Original language	English
Title of host publication	Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015
Publisher	Institute of Electrical and Electronics Engineers (IEEE)
Pages	279-282
Number of pages	4
ISBN (Electronic)	9781479982189
DOIs	https://doi.org/10.1109/IC2E.2015.64
Publication status	Published - 1 Jan 2015
Event	2015 IEEE International Conference on Cloud Engineering, IC2E 2015 - Tempe, United States Duration: 9 Mar 2015 → 12 Mar 2015

Conference

Conference	2015 IEEE International Conference on Cloud Engineering, IC2E 2015
Country/Territory	United States
City	Tempe
Period	9/03/15 → 12/03/15

Access to Document

10.1109/IC2E.2015.64

Handle.net

Persistent link

Cite this

@inproceedings{24700fa63b7842e7a2baad60c9fc298c,

title = "Information flow control for strong protection with flexible sharing in PaaS",

abstract = "The need to share data across applications is becoming increasingly evident. Current cloud isolation mechanisms focus solely on protection, such as containers that isolate at the OS-level, and virtual machines that isolate through the hypervisor. However, by focusing rigidly on protection, these approaches do not provide for controlled sharing. This paper presents how Information Flow Control (IFC) offers a flexible alternative. As a data-centric mechanism it enables strong isolation when required, while providing continuous, fine grained control of the data being shared. An IFC-enabled cloud platform would ensure that policies are enforced as data flows across all applications, without requiring any special sharing mechanisms.",

author = "Pasquier, {Thomas F.J.M.} and Jatinder Singh and Jean Bacon",

year = "2015",

month = jan,

day = "1",

doi = "10.1109/IC2E.2015.64",

language = "English",

pages = "279--282",

booktitle = "Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

address = "United States",

note = "2015 IEEE International Conference on Cloud Engineering, IC2E 2015 ; Conference date: 09-03-2015 Through 12-03-2015",

}

Pasquier, TFJM, Singh, J & Bacon, J 2015, Information flow control for strong protection with flexible sharing in PaaS. in Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015., 7092930, Institute of Electrical and Electronics Engineers (IEEE), pp. 279-282, 2015 IEEE International Conference on Cloud Engineering, IC2E 2015, Tempe, United States, 9/03/15. https://doi.org/10.1109/IC2E.2015.64

Information flow control for strong protection with flexible sharing in PaaS. / Pasquier, Thomas F.J.M.; Singh, Jatinder; Bacon, Jean.
Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015. Institute of Electrical and Electronics Engineers (IEEE), 2015. p. 279-282 7092930.

Research output: Chapter in Book/Report/Conference proceeding › Conference Contribution (Conference Proceeding)

TY - GEN

T1 - Information flow control for strong protection with flexible sharing in PaaS

AU - Pasquier, Thomas F.J.M.

AU - Singh, Jatinder

AU - Bacon, Jean

PY - 2015/1/1

Y1 - 2015/1/1

N2 - The need to share data across applications is becoming increasingly evident. Current cloud isolation mechanisms focus solely on protection, such as containers that isolate at the OS-level, and virtual machines that isolate through the hypervisor. However, by focusing rigidly on protection, these approaches do not provide for controlled sharing. This paper presents how Information Flow Control (IFC) offers a flexible alternative. As a data-centric mechanism it enables strong isolation when required, while providing continuous, fine grained control of the data being shared. An IFC-enabled cloud platform would ensure that policies are enforced as data flows across all applications, without requiring any special sharing mechanisms.

AB - The need to share data across applications is becoming increasingly evident. Current cloud isolation mechanisms focus solely on protection, such as containers that isolate at the OS-level, and virtual machines that isolate through the hypervisor. However, by focusing rigidly on protection, these approaches do not provide for controlled sharing. This paper presents how Information Flow Control (IFC) offers a flexible alternative. As a data-centric mechanism it enables strong isolation when required, while providing continuous, fine grained control of the data being shared. An IFC-enabled cloud platform would ensure that policies are enforced as data flows across all applications, without requiring any special sharing mechanisms.

UR - http://www.scopus.com/inward/record.url?scp=84944348355&partnerID=8YFLogxK

U2 - 10.1109/IC2E.2015.64

DO - 10.1109/IC2E.2015.64

M3 - Conference Contribution (Conference Proceeding)

AN - SCOPUS:84944348355

SP - 279

EP - 282

BT - Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015

PB - Institute of Electrical and Electronics Engineers (IEEE)

T2 - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015

Y2 - 9 March 2015 through 12 March 2015

ER -

Information flow control for strong protection with flexible sharing in PaaS

Abstract

Conference

Access to Document

Handle.net

Other files and links

Fingerprint

Cite this