A Review of Information Flow Control in Composite Services

Abstract:

Service computing facilitates resource sharing and business collaboration for cross-domain partiers by universal service description and discovery. The multi-domain nature of service oriented environments introduces challenging security issues, especially with regard to information flow control which controls the flow of privacy resources. This paper presents a state-of-the-art review of information flow control technology in service oriented environments. We review the research background and classifications of information flow control, and discuss architecture and existing technologies of both centralized and distributed information flow approach. We outline the features, advantages and limitations of existing information flow control approaches. The analysis results show that the research of collaboration and dynamic nature are important, but insufficient to secure information flow.

• Periodical: Applied Mechanics and Materials (Volumes 336-338)
• Pages: 2348-2353
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.336-338.2348
• Online since: July 2013
• Authors: Bo Yu, Lin Yang, Shu Hui Chen, Lin Ru Ma
• Keywords: Composite Service, Information Flow Control, Information Security

References

[1] N. Milanovic and M. Malek: IEEE Internet Comput. Vol. 8 (2004), p.51–59.

[2] R. Fethi, H. Yu, D. Feras and S. Wu: Information Systems and e-Busi. Vol. 5 (2007), pp.185-200.

[3] B. Carminati, E. Ferrari and P.C. Huang, in Proceedings of ICWS, IEEE (2006).

[4] X.H. Le, T. Doll, M. Barbosu, A. Luque and D. Wang: J. Biomed. Inform. Vol. 45 (2012), pp.084-107.

[5] W. Jie, J. Arshad, R. Sinnott, P. Townend, Z. Lei: ACM Comput. Surv. Vol. 43 (2011), pp.12-37.

[6] M. Menzel and C. Meinel, in Proceedings of SCC, IEEE (2009).

[7] N. Ravi, M. Gruteser and L. Iftode, in Proceedings of MOBIQUITOUS, IEEE (2006).

[8] S.C. Chou and C.H. Huang: J. Syst. Software Vol. 83 (2010), pp.77-84.

[9] A. Sabelfeld and A.C. Myers: IEEE J. Sel Areas Commun Vol. 21 (2003), pp.5-19.

[10] G. Smith: Malware Detection Vol. 27 (2007), pp.291-307.

[11] J. Bacon D. Evans, D.M. Eyers, M. Migliavacca, P. Pietzuch and B. Shand, in Proceedings of Middleware, ACM (2010).

[12] S. Ayed, N. Cuppens-Boulahia and F. Cuppens, in Proceedings ofASIAN, Springer (2007).

[13] Z.P. Gui, H.Y. Wu and Z. Wang, in Proceedings of NCM, IEEE, (2008).

[14] U. Yildiz and C. Godart, in Proceedings of ICWS, IEEE (2007).

[15] H. Chivers and J. Jacob, in Proceedings of ICDCS, IEEE (2005).

[16] J. Wei, L. Singaravelu and C. Pu, in Proceedings of ICWS, IEEE (2007).

[17] W. She, I.L. Yen, B.M. Thuraisingham and E. Bertino, in Proceedings of ICWS, IEEE (2009).

[18] W. She, I.L. Yen, B.M. Thuraisingham and E. Bertino, in Proceedings of SOCA, IEEE (2009).

[19] D. Liua, J. Pengb, K.H. Lawb, G. Wiederholdc and R.D. Sriramd: Adv. Eng. Inform. Vol. 19 (2005), pp.25-42.

[20] P. Samarati, E. Bertino and A. Ciampichetti: IEEE T. Knowl. Data. En. Vol. 9 (1997), pp.524-538.

[21] W. Zhou and C. Meinel, in Proceedings of the ISECS, IEEE (2008).

[22] U. Yildiz and C. Godart, in Proceedings of ECWS, IEEE (2007).

[23] G. Chafle, S Chandra., V. Mann and M.G. Nand, in Proceedings of ICWS, IEEE (2005).

[24] D. Hutter and M. Volkamer, in Proceedings of SPC, Springer (2006).

[25] Information on http: /docs. oasis-open. org/wsbpel/2. 0/OS/wsbpel-v2. 0-OS. html.

[26] Information on http: /www. w3. org/TR/ws-cdl-10/, (2005).

[27] D. Denning: Commun. ACM Vol. 19 (1976), pp.236-242.

[28] J. McLean, in Proceedings of SP, IEEE (1990).

[29] H. Zorgati and T. Abdellatif, in Proceedings of CRiSIS, IEEE (2011).

[30] D. F. C., Brewer and M. J. Nash, in Proceedings of SP, IEEE (1989).

[31] R. Wu, G.J. Ahn, H. Hu and M. Singhal, in Proceedings of CollaborateCom, IEEE (2010).

[32] E. Hermann, in Proceedings of the ARES, IEEE (2011).

[33] Y. Zhang and J.L. Chen, in Proceedings of SCC, IEEE (2011).

[34] X. Liu and Y. Sun, in Proceedings of ICCSIE, Springer (2011).

[35] X. Wang and D. Feng, in Proceedings of CSA, IEEE (2009).

[36] M. Jaume, V.V.T. Tong and L. Me, in Proceedings of ICISS, Springer (2011).

[37] S. Zdancewic, in Proceedings of PLID, Springer (2004).

[38] P. Li, S. Zdancewic, in Proceedings of CSFW, IEEE (2005).

[39] Lennart Beringer, in Proceedings of the APLAS, Springer (2012).

[40] D. Akselrod, A. Sinha and T. Kirubarajan, in Proceedings of FUSION, IEEE (2006).

[41] A. Ganjali, D. Lie, in Proceedings of STC ACM (2012).

[42] W. She, I.L. Yen and B.M. Thuraisingham: Int. J. Web Serv. Res. Vol. 7 (2010), pp.1-21.

[43] W. She, I.L. Yen, B.M. Thuraisingham and S. Huang, in Proceedings of ICWS, IEEE (2011).

[44] W. She, I. Yen, B. Thuraisingham and E. Bertino. IEEE T. Serv. Comput., Vol. 9 (2012).

[45] W. She, I.L. Yen and B.M. Thuraisingham, in Proceedings of ICWS, IEEE (2010).

[46] G. Groh, S. Birnkammerer, in PASSAT, IEEE (2011).

[47] A.C. Myers, B. Liskov, in Proceedings of SOSP, ACM (1997).

[48] I. Roy, D.E. Porter, M.D. Bond and E. Witchel, in Proceedings of the PLDI, ACM (2009).

[49] Z. Tari, P. Bertok and D. Simic: Int. J. Web Serv. Res. Vol. 3 (2006), pp.1-28.

[50] B. Brodecki, M. Kalewski and M. Szychowiak, in Proceedings of PPAM, Springer (2011).

[51] P. Bertók, A. Tari, S. Kedjar, in Proceedings of the PRO-VE, Springer (2009).

[52] J. A. Fax and R. M. Murray: IEEE T. Automat. Contr. Vol. 49 (2004), pp.1465-1476.

[53] D. Akselrod, A. Sinha, T. Kirubarajan: IEEE T. Syst. Man Cyb. Vol. 42 (2012), pp.501-517.