文章基本信息

标题：A Rule Enforced Information Flow Control System with Tagged Service Data for Cloud Service Providers
本地全文：下载
作者：Kirtibala Mali ; Prof. Anurag Jain
期刊名称：International Journal of Computer Science and Information Technologies
电子版ISSN：0975-9646
出版年度：2016
卷号：7
期号：1
页码：201-207
出版社：TechScience Publications
摘要：As Cloud computing is getting prevalent step bystep, Cloud service providers need to overhaul their systemswith the policies which may lead to better execution andadditionally flow control. According to the volume of usersgets expanded, the framework makes more surface area forsecurity attacks. Also, the cloud is trusted third party area andif some attacker or engineer causes the theft or leakages oftheir sensitive information lessens the trust over theframework. Information flow control (IFC) is one such areawhich monitors the flow and other effective factors to managethe information exchanges between the components of thesoftware or cloud based systems. It guarantees confidentialityand integrity, both with a clear isolation between the clientinteraction with the framework. Essentially it separates thetraffic created by diverse users or components by utilizing thetagging or labelling mechanism. By traffic, this categorizationis made simple and cost effective. After the categorization isaccomplished, the information is isolated into multiple objectshaving a place with diverse subjects. Beforehand, theredifferent mechanisms created to give effective IFC. Yet at thesame time there are some issues related with clear separationof a client's interaction, order of flow information, sorting thetraffic classes, implicit tagging, covert channel, over and underlabelling and so forth. This work recommends a simplifiedstandard based distributed information flow control for cloudcomputing. Here the different rules are framed for guiding theinformation flow and achieves clear order with higheraccuracy. At the analytical level of evaluation, the approach isserving everything the needs of effective flow controlmechanism and later prototype will legitimize the same.
关键词：Cloud Computing; Cloud security; Confidentiality;Integrity Information Flow Control (IFC); Labelling;Classification; Rule Based; Virtual Machines(VM).