Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control

Thomas F.J.M. Pasquier, Julia E. Powles

Research output: Chapter in Book/Conference paperConference paper

10 Citations (Scopus)

Abstract

The adoption of cloud computing is increasing and its use is becoming widespread in many sectors. As cloud service provision increases, legal and regulatory issues become more significant. In particular, the international nature of cloud provision raises concerns over the location of data and the laws to which they are subject. In this paper we investigate Information Flow Control (IFC) as a possible technical solution to expressing, enforcing and demonstrating compliance of cloud computing systems with policy requirements inspired by data protection and other laws. We focus on geographic location of data, since this is the paradigmatic concern of legal/regulatory requirements on cloud computing and, to date, has not been met with robust technical solutions and verifiable data flow audit trails.

Original languageEnglish
Title of host publicationProceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015
Place of PublicationUSA
PublisherIEEE, Institute of Electrical and Electronics Engineers
Pages410-415
Number of pages6
ISBN (Electronic)9781479982189
DOIs
Publication statusPublished - 1 Jan 2015
Externally publishedYes
Event2015 IEEE International Conference on Cloud Engineering, IC2E 2015 - Tempe, United States
Duration: 9 Mar 201512 Mar 2015

Conference

Conference2015 IEEE International Conference on Cloud Engineering, IC2E 2015
CountryUnited States
CityTempe
Period9/03/1512/03/15

Fingerprint

Cloud computing
Flow control
Data privacy

Cite this

Pasquier, T. F. J. M., & Powles, J. E. (2015). Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control. In Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015 (pp. 410-415). [7092953] USA: IEEE, Institute of Electrical and Electronics Engineers. https://doi.org/10.1109/IC2E.2015.71
Pasquier, Thomas F.J.M. ; Powles, Julia E. / Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control. Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015. USA : IEEE, Institute of Electrical and Electronics Engineers, 2015. pp. 410-415
@inproceedings{d6c7ee2e6b7e46e2b790d12416299c9d,
title = "Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control",
abstract = "The adoption of cloud computing is increasing and its use is becoming widespread in many sectors. As cloud service provision increases, legal and regulatory issues become more significant. In particular, the international nature of cloud provision raises concerns over the location of data and the laws to which they are subject. In this paper we investigate Information Flow Control (IFC) as a possible technical solution to expressing, enforcing and demonstrating compliance of cloud computing systems with policy requirements inspired by data protection and other laws. We focus on geographic location of data, since this is the paradigmatic concern of legal/regulatory requirements on cloud computing and, to date, has not been met with robust technical solutions and verifiable data flow audit trails.",
keywords = "cloud computing, information flow control, data, data regulation",
author = "Pasquier, {Thomas F.J.M.} and Powles, {Julia E.}",
year = "2015",
month = "1",
day = "1",
doi = "10.1109/IC2E.2015.71",
language = "English",
pages = "410--415",
booktitle = "Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015",
publisher = "IEEE, Institute of Electrical and Electronics Engineers",
address = "United States",

}

Pasquier, TFJM & Powles, JE 2015, Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control. in Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015., 7092953, IEEE, Institute of Electrical and Electronics Engineers, USA, pp. 410-415, 2015 IEEE International Conference on Cloud Engineering, IC2E 2015, Tempe, United States, 9/03/15. https://doi.org/10.1109/IC2E.2015.71

Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control. / Pasquier, Thomas F.J.M.; Powles, Julia E.

Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015. USA : IEEE, Institute of Electrical and Electronics Engineers, 2015. p. 410-415 7092953.

Research output: Chapter in Book/Conference paperConference paper

TY - GEN

T1 - Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control

AU - Pasquier, Thomas F.J.M.

AU - Powles, Julia E.

PY - 2015/1/1

Y1 - 2015/1/1

N2 - The adoption of cloud computing is increasing and its use is becoming widespread in many sectors. As cloud service provision increases, legal and regulatory issues become more significant. In particular, the international nature of cloud provision raises concerns over the location of data and the laws to which they are subject. In this paper we investigate Information Flow Control (IFC) as a possible technical solution to expressing, enforcing and demonstrating compliance of cloud computing systems with policy requirements inspired by data protection and other laws. We focus on geographic location of data, since this is the paradigmatic concern of legal/regulatory requirements on cloud computing and, to date, has not been met with robust technical solutions and verifiable data flow audit trails.

AB - The adoption of cloud computing is increasing and its use is becoming widespread in many sectors. As cloud service provision increases, legal and regulatory issues become more significant. In particular, the international nature of cloud provision raises concerns over the location of data and the laws to which they are subject. In this paper we investigate Information Flow Control (IFC) as a possible technical solution to expressing, enforcing and demonstrating compliance of cloud computing systems with policy requirements inspired by data protection and other laws. We focus on geographic location of data, since this is the paradigmatic concern of legal/regulatory requirements on cloud computing and, to date, has not been met with robust technical solutions and verifiable data flow audit trails.

KW - cloud computing

KW - information flow control

KW - data

KW - data regulation

UR - http://www.scopus.com/inward/record.url?scp=84942456663&partnerID=8YFLogxK

U2 - 10.1109/IC2E.2015.71

DO - 10.1109/IC2E.2015.71

M3 - Conference paper

SP - 410

EP - 415

BT - Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015

PB - IEEE, Institute of Electrical and Electronics Engineers

CY - USA

ER -

Pasquier TFJM, Powles JE. Expressing and Enforcing Location Requirements in the Cloud Using Information Flow Control. In Proceedings - 2015 IEEE International Conference on Cloud Engineering, IC2E 2015. USA: IEEE, Institute of Electrical and Electronics Engineers. 2015. p. 410-415. 7092953 https://doi.org/10.1109/IC2E.2015.71