AT-DIFC+: Toward Adaptive and Trust-Aware Decentralized Information Flow Control

ACM Transactions on Autonomous and Adaptive Systems (TAAS) Pub Date : 2021-12-20 DOI:10.1145/3487292

Charilaos Skandylas, Narges Khakpour, J. Andersson

{"title":"AT-DIFC+: Toward Adaptive and Trust-Aware Decentralized Information Flow Control","authors":"Charilaos Skandylas, Narges Khakpour, J. Andersson","doi":"10.1145/3487292","DOIUrl":null,"url":null,"abstract":"Modern software systems and their corresponding architectures are increasingly decentralized, distributed, and dynamic. As a consequence, decentralized mechanisms are required to ensure security in such architectures. Decentralized Information Flow Control (DIFC) is a mechanism to control information flow in distributed systems. This article presents and discusses several improvements to an adaptive decentralized information flow approach that incorporates trust for decentralized systems to provide security. Adaptive Trust-Aware Decentralized Information Flow (AT-DIFC+) combines decentralized information flow control mechanisms, trust-based methods, and decentralized control architectures to control and enforce information flow in an open, decentralized system. We strengthen our approach against newly discovered attacks and provide additional information about its reconfiguration, decentralized control architectures, and reference implementation. We evaluate the effectiveness and performance of AT-DIFC+ on two case studies and perform additional experiments and to gauge the mitigations’ effectiveness against the identified attacks.","PeriodicalId":377078,"journal":{"name":"ACM Transactions on Autonomous and Adaptive Systems (TAAS)","volume":"106 3 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2021-12-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"2","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"ACM Transactions on Autonomous and Adaptive Systems (TAAS)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1145/3487292","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 2

Abstract

Modern software systems and their corresponding architectures are increasingly decentralized, distributed, and dynamic. As a consequence, decentralized mechanisms are required to ensure security in such architectures. Decentralized Information Flow Control (DIFC) is a mechanism to control information flow in distributed systems. This article presents and discusses several improvements to an adaptive decentralized information flow approach that incorporates trust for decentralized systems to provide security. Adaptive Trust-Aware Decentralized Information Flow (AT-DIFC+) combines decentralized information flow control mechanisms, trust-based methods, and decentralized control architectures to control and enforce information flow in an open, decentralized system. We strengthen our approach against newly discovered attacks and provide additional information about its reconfiguration, decentralized control architectures, and reference implementation. We evaluate the effectiveness and performance of AT-DIFC+ on two case studies and perform additional experiments and to gauge the mitigations’ effectiveness against the identified attacks.

查看原文本刊更多论文

AT-DIFC+:面向自适应和信任感知的分散信息流控制

现代软件系统及其相应的体系结构越来越分散、分布和动态。因此，需要分散的机制来确保此类体系结构中的安全性。分散信息流控制(DIFC)是分布式系统中控制信息流的一种机制。本文提出并讨论了对自适应去中心化信息流方法的几种改进，该方法结合了对去中心化系统的信任来提供安全性。自适应信任感知去中心化信息流(AT-DIFC+)结合了去中心化信息流控制机制、基于信任的方法和去中心化控制架构，以控制和执行开放、去中心化系统中的信息流。我们加强了针对新发现攻击的方法，并提供了有关其重新配置、分散控制架构和参考实现的额外信息。我们在两个案例研究中评估了AT-DIFC+的有效性和性能，并进行了额外的实验，以衡量缓解措施对已识别攻击的有效性。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

ACM Transactions on Autonomous and Adaptive Systems (TAAS)

自引率

0.00%

发文量