Enforcing End-to-End Application Security in the Cloud

Abstract : Security engineering must be integrated with all stages of application specification and development to be effective. Doing this properly is increasingly critical as organisations rush to offload their software services to cloud providers. Service-level agreements (SLAs) with these providers currently focus on performance-oriented parameters, which runs the risk of exacerbating an impedance mismatch with the security middleware. Not only do we want cloud providers to isolate each of their clients from others, we also want to have means to isolate components and users within each client's application. We propose a principled approach to designing and deploying end-to-end secure, distributed software by means of thorough, relentless tagging of the security meaning of data, analogous to what is already done for data types. The aim is to guarantee that--above a small trusted code base--data cannot be leaked by buggy or malicious software components. This is crucial for cloud infrastructures, in which the stored data and hosted services all have different owners whose interests are not aligned (and may even be in competition). We have developed data tagging schemes and enforcement techniques that can help form the aforementioned trusted code base. Our big idea--cloud-hosted services that have end-to-end information flow control--preempts worries about security and privacy violations retarding the evolution of large-scale cloud computing.
Type de document :
Communication dans un congrès
Indranil Gupta; Cecilia Mascolo. ACM/IFIP/USENIX 11th International Middleware Conference (MIDDLEWARE), Nov 2010, Bangalore, India. Springer, Lecture Notes in Computer Science, LNCS-6452, pp.293-312, 2010, Middleware 2010. 〈10.1007/978-3-642-16955-7_15〉
Liste complète des métadonnées

Littérature citée [24 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-01055278
Contributeur : Hal Ifip <>
Soumis le : mardi 12 août 2014 - 11:33:59
Dernière modification le : mercredi 16 août 2017 - 17:20:51
Document(s) archivé(s) le : mercredi 26 novembre 2014 - 22:45:30

Fichier

mw-bi.pdf
Fichiers produits par l'(les) auteur(s)

Licence


Distributed under a Creative Commons Paternité 4.0 International License

Identifiants

Citation

Jean Bacon, David Evans, David M. Eyers, Matteo Migliavacca, Peter Pietzuch, et al.. Enforcing End-to-End Application Security in the Cloud. Indranil Gupta; Cecilia Mascolo. ACM/IFIP/USENIX 11th International Middleware Conference (MIDDLEWARE), Nov 2010, Bangalore, India. Springer, Lecture Notes in Computer Science, LNCS-6452, pp.293-312, 2010, Middleware 2010. 〈10.1007/978-3-642-16955-7_15〉. 〈hal-01055278〉

Partager

Métriques

Consultations de la notice

137

Téléchargements de fichiers

388