首页> 外文会议>IEEE International Conference on Cloud Engineering >Silver Lining: Enforcing Secure Information Flow at the Cloud Edge
【24h】

Silver Lining: Enforcing Secure Information Flow at the Cloud Edge

机译:一线希望:在云边缘加强安全信息流

获取原文

摘要

SilverLine is a novel, exceptionally modular framework for enforcing mandatory information flow policies for Java computations on commodity, data-processing, Platform-as-a-Service clouds by leveraging Aspect-Oriented Programming (AOP) and In-lined Reference Monitors (IRMs). Unlike traditional system-level approaches, which typically require modifications to the cloud kernel software, OS/hypervisor, VM, or cloud file system, SilverLine automatically in-lines secure information flow tracking code into untrusted Java binaries as they arrive at the cloud. This facilitates efficient enforcement of a large, flexible class of information flow and mandatory access control policies without any customization of the cloud or its underlying infrastructure. The cloud and the enforcement framework can therefore be maintained completely separately and orthogonally (i.e., modularly). To demonstrate the approach's feasibility, a prototype implements and deploys SilverLine on a real-world data processing cloud-Hadoop MapReduce. Evaluation results demonstrate that SilverLine provides inter-process information flow security for Hadoop clouds with easy maintainability (through modularity) and low overhead.
机译:SilverLine是一个新颖的模块化模块框架,可通过利用面向方面的编程(AOP)和嵌入式参考监视器(IRM)来对商品,数据处理,平台即服务云上的Java计算实施强制性的信息流策略。 。与传统的系统级方法不同,传统的系统级方法通常需要修改云内核软件,OS /管理程序,VM或云文件系统,而SilverLine在到达不受信任的Java二进制文件时,会自动将安全信息流跟踪代码插入到不受信任的Java二进制文件中。这有助于高效实施大型,灵活的信息流类别和强制性访问控制策略,而无需对云或其底层基础架构进行任何自定义。因此,可以完全独立地并且正交地(即,模块化地)维护云和执行框架。为了演示该方法的可行性,原型在实际数据处理云Hadoop MapReduce上实现并部署了SilverLine。评估结果表明,SilverLine为Hadoop云提供了进程间信息流安全性,具有易于维护的能力(通过模块化)和较低的开销。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号