AN INFORMATION FLOW CONTROL APPROACH IN COMPOSITE SERVICES
Distributed information flow control has several advantages over centralized information flow control for securing composite services in service oriented environments.In this paper,an approach of distributed information flow control which utilizes security labels to convey control information is considered.At first,security labels are formally defined to describe the control information of information flow control.The computation method of security labels is presented as well.Secondly,a label-based information flow control protocol,namely LBIFC,is presented.This protocol is based on request/decision protocol between service providers.Thirdly,both the theoretical analysis and experimental validation of proposed LBIFC are provided.The results show that our solution not only keeps the security capabilities of information flow control,but also reduces the complexity of flow control protocol in composite services.
Security label Information flow control Service chain Composite services Information security
Bo Yu Lin Yang Shuhui Chen Yongjun Wang Linru Ma
College of Computer,National University of Defense Technology,Changsha,410073,China;Institute of Ele Institute of Electronic Equipments & System Engineering Corporation,Beijing,100141,China College of Computer,National University of Defense Technology,Changsha,410073,China
国际会议
北京
英文
199-205
2013-04-27（万方平台首次上网日期，不代表论文的发表时间）