Formal verification of secure information flow in cloud computing. (April 2016)

• Record Type: Journal Article
• Authors: Zeng, Wen; Koutny, Maciej; Watson, Paul; Germanos, Vasileios
• Is Part Of: Journal of information security and applications. Volume 27/28(2016)
• Page Start: 103
• Page End: 116
• Publication Date: 2016-04
• Subjects: Federated cloud system -- Information flow security -- Bell–LaPadula rules -- Petri net -- Diagnosability -- Model checking; Computer security -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.jisa.2016.03.002
• Languages: English
• ISSNs: 2214-2126

Abstract

Abstract: Federated cloud systems increase the reliability and reduce the cost of computational support to an organisation. However, the resulting combination of secure private clouds and less secure public clouds impacts on the overall security of the system as applications need to be located within different clouds. In this paper, the entities of a federated cloud system as well as the clouds are assigned security levels of a given security lattice. Then a dynamic flow sensitive security model for a federated cloud system is introduced within which the Bell–LaPadula rules and cloud security rule can be captured. The rest of the paper demonstrates how Petri nets and the associated verification techniques could be used to analyse the security of information flow in federated cloud systems.