Integrating Messaging Middleware and Information Flow Control

Jatinder Singh, Thomas F. J.-M. Pasquier, Jean Bacon, David Eyers
2015 2015 IEEE International Conference on Cloud Engineering  
Security is an ongoing challenge in cloud computing. Currently, cloud consumers have few mechanisms for managing their data within the cloud provider's infrastructure. Information Flow Control (IFC) involves attaching labels to data, to govern its flow throughout a system. We have worked on kernel-level IFC enforcement to protect data flows within a virtual machine (VM). This paper makes the case for, and demonstrates the feasibility of an IFC-enabled messaging middleware, to enforce IFC within
more » ... and across applications, containers, VMs, and hosts. We detail how such middleware can integrate with local (kernel) enforcement mechanisms, and highlight the benefits of separating data management policy from application/service-logic.
doi:10.1109/ic2e.2015.13 dblp:conf/ic2e/SinghPBE15 fatcat:cnigp56jxff2he2o6rmbpdxmue