基于双层信息流控制的云敏感数据安全增强  

Enhancing Sensitive Data Security Based-on Double-Layer Information Flow Controlling in the Cloud

作　　者：吴泽智[1,2] 陈性元 杜学绘[1] 杨智 WU Ze-zhi;CHEN Xing-yuan;DU Xue-hui;YANG Zhi(College of Cryptogram Engineering,PLA Information Engineering University,Zhengzhou,Henan 450001,China;State Key Laboratory of Cryptology,Beijing 100094,China)

机构地区：[1]信息工程大学密码工程学院,河南郑州450001 [2]密码科学技术国家重点实验室,北京100094

出　　处：《电子学报》2018年第9期2245-2250,共6页Acta Electronica Sinica

基　　金：国家高技术研究发展计划(863)(No.2015AA016006;No.2012AA012704)

摘　　要：已有的云安全防护方法如加密、访问控制和虚拟机隔离等不能够提供数据端到端的安全防护。首先,提出了一个面向云环境的双层信息流控制模型,给出了模型的关键要素定义、集中式与分布式信息流控制规则、能力标记调整规则、标记传播规则和降密规则.然后,综合动态污点跟踪和虚拟机自省技术,设计并实现了原型系统IFCloud,可为云租户提供信息流跟踪与控制即服务,为云平台提供常见系统攻击如栈溢出、缓冲区溢出等攻击的防护机制.最后,给出了原型系统IFCloud的功能测试结果.表明IFCloud能够灵活、正确、实时地跟踪和控制云下敏感数据流.可应用于云平台下面向软件即服务的细粒度数据安全保护.The existing security methods in the cloud such as encryption,access control,and VM isolation can not guarantee end-to-end data security.To address this problem,a double-layer information flow control model is proposed.The definition of key element,centralized and decentralized information flow rules,capability adjustment rules,label propagation rules,and declassification rules of the model are presented.Then,taking the advantages of dynamic taint tracking and virtual machine introspection technologies,a prototype system named IFCloud are designed and implemented.IFCloud achieves information flow tracking and controlling as a service for cloud tenant and provides detection methods against common system attacks such as stack and buffer overflow attack for the cloud provider.Finally,IFCloud is demonstrated to be a flexible and accurate system that tracks and controls the sensitive data flow in the cloud at runtime from the function test results,and it can be applied to protect data security at a fine-grained level for the software as a service cloud.

关 键 词：云数据安全 信息流控制模型 动态污点跟踪 虚拟机自省 栈溢出攻击 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]