Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control

Thomas F.J.M. Pasquier; Julia E. Powles

doi:10.1109/IC2E.2015.71

Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control

Thomas F.J.M. Pasquier, Julia E. Powles

Research output: Chapter in Book/Conference paper › Conference paper › peer-review

18 Citations (Scopus)

Abstract

The adoption of cloud computing is increasing and its use is becoming widespread in many sectors. As cloud service provision increases, legal and regulatory issues become more significant. In particular, the international nature of cloud provision raises concerns over the location of data and the laws to which they are subject. In this paper we investigate Information Flow Control (IFC) as a possible technical solution to expressing, enforcing and demonstrating compliance of cloud computing systems with policy requirements inspired by data protection and other laws. We focus on geographic location of data, since this is the paradigmatic concern of legal/regulatory requirements on cloud computing and, to date, has not been met with robust technical solutions and verifiable data flow audit trails.

Original language	English
Title of host publication	Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015
Place of Publication	USA
Publisher	IEEE, Institute of Electrical and Electronics Engineers
Pages	410-415
Number of pages	6
ISBN (Electronic)	9781479982189
DOIs	https://doi.org/10.1109/IC2E.2015.71
Publication status	Published - 1 Jan 2015
Externally published	Yes
Event	2015 IEEE International Conference on Cloud Engineering, IC2E 2015 - Tempe, United States Duration: 9 Mar 2015 → 12 Mar 2015

Conference

Conference	2015 IEEE International Conference on Cloud Engineering, IC2E 2015
Country/Territory	United States
City	Tempe
Period	9/03/15 → 12/03/15

Access to Document

10.1109/IC2E.2015.71

Cite this

@inproceedings{d6c7ee2e6b7e46e2b790d12416299c9d,

title = "Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control",

abstract = "The adoption of cloud computing is increasing and its use is becoming widespread in many sectors. As cloud service provision increases, legal and regulatory issues become more significant. In particular, the international nature of cloud provision raises concerns over the location of data and the laws to which they are subject. In this paper we investigate Information Flow Control (IFC) as a possible technical solution to expressing, enforcing and demonstrating compliance of cloud computing systems with policy requirements inspired by data protection and other laws. We focus on geographic location of data, since this is the paradigmatic concern of legal/regulatory requirements on cloud computing and, to date, has not been met with robust technical solutions and verifiable data flow audit trails.",

keywords = "cloud computing, information flow control, data, data regulation",

author = "Pasquier, {Thomas F.J.M.} and Powles, {Julia E.}",

year = "2015",

month = jan,

day = "1",

doi = "10.1109/IC2E.2015.71",

language = "English",

pages = "410--415",

booktitle = "Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015",

publisher = "IEEE, Institute of Electrical and Electronics Engineers",

address = "United States",

note = "2015 IEEE International Conference on Cloud Engineering, IC2E 2015 ; Conference date: 09-03-2015 Through 12-03-2015",

}

Pasquier, TFJM & Powles, JE 2015, Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control. in Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015., 7092953, IEEE, Institute of Electrical and Electronics Engineers, USA, pp. 410-415, 2015 IEEE International Conference on Cloud Engineering, IC2E 2015, Tempe, Arizona, United States, 9/03/15. https://doi.org/10.1109/IC2E.2015.71

Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control. / Pasquier, Thomas F.J.M.; Powles, Julia E.
Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015. USA: IEEE, Institute of Electrical and Electronics Engineers, 2015. p. 410-415 7092953.

Research output: Chapter in Book/Conference paper › Conference paper › peer-review

TY - GEN

T1 - Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control

AU - Pasquier, Thomas F.J.M.

AU - Powles, Julia E.

PY - 2015/1/1

Y1 - 2015/1/1

N2 - The adoption of cloud computing is increasing and its use is becoming widespread in many sectors. As cloud service provision increases, legal and regulatory issues become more significant. In particular, the international nature of cloud provision raises concerns over the location of data and the laws to which they are subject. In this paper we investigate Information Flow Control (IFC) as a possible technical solution to expressing, enforcing and demonstrating compliance of cloud computing systems with policy requirements inspired by data protection and other laws. We focus on geographic location of data, since this is the paradigmatic concern of legal/regulatory requirements on cloud computing and, to date, has not been met with robust technical solutions and verifiable data flow audit trails.

AB - The adoption of cloud computing is increasing and its use is becoming widespread in many sectors. As cloud service provision increases, legal and regulatory issues become more significant. In particular, the international nature of cloud provision raises concerns over the location of data and the laws to which they are subject. In this paper we investigate Information Flow Control (IFC) as a possible technical solution to expressing, enforcing and demonstrating compliance of cloud computing systems with policy requirements inspired by data protection and other laws. We focus on geographic location of data, since this is the paradigmatic concern of legal/regulatory requirements on cloud computing and, to date, has not been met with robust technical solutions and verifiable data flow audit trails.

KW - cloud computing

KW - information flow control

KW - data

KW - data regulation

UR - http://www.scopus.com/inward/record.url?scp=84942456663&partnerID=8YFLogxK

U2 - 10.1109/IC2E.2015.71

DO - 10.1109/IC2E.2015.71

M3 - Conference paper

AN - SCOPUS:84942456663

SP - 410

EP - 415

BT - Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015

PB - IEEE, Institute of Electrical and Electronics Engineers

CY - USA

T2 - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015

Y2 - 9 March 2015 through 12 March 2015

ER -

Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control

Abstract

Conference

Access to Document

Other files and links

Fingerprint

Cite this