Migliavacca, Matteo and Papagiannis, Ioannis and Eyers, David M. and Shand, Brian and Bacon, Jean and Pietzuch, Peter (2010) Distributed Middleware Enforcement of Event Flow Security Policy. In: Gupta, Indrani and Mascolo, Cecilia, eds. Middleware 2010. Lecture Notes in Computer Science , 6452. Springer Berlin Heidelberg pp. 334-354. ISBN 9783642169540.
Distributed, event-driven applications that process sensitive user data and involve multiple organisational domains must comply with complex security requirements. Ideally, developers want to express security policy for such applications in data-centric terms, controlling the flow of information throughout the system. Current middleware does not support the specification of such end-to-end security policy and lacks uniform mechanisms for enforcement. We describe DEFCon-Policy, a middleware that enforces security policy in multi-domain, event-driven applications. Event flow policy is expressed in a high-level language that specifies permitted flows between distributed software components. The middleware limits the interaction of components based on the policy and the data that components have observed. It achieves this by labelling data and assigning privileges to components. We evaluate DEFCon-Policy in a realistic medical scenario and demonstrate that it can provide global security guarantees without burdening application developers.
|Item Type:||Conference or workshop item (Paper)|
|Uncontrolled keywords:||multi-domain distributed applications; security policy; information flow control; event-based middleware|
|Subjects:||Q Science > QA Mathematics (inc Computing science) > QA 76 Software, computer programming,|
|Divisions:||Faculties > Science Technology and Medical Studies > School of Computing > Security Group
Faculties > Science Technology and Medical Studies > School of Computing > Future Computing Group
|Depositing User:||Matteo Migliavacca|
|Date Deposited:||23 Oct 2012 20:47|
|Last Modified:||12 Mar 2013 09:45|
|Resource URI:||http://kar.kent.ac.uk/id/eprint/31862 (The current URI for this page, for reference purposes)|
- Depositors only (login required):