{"title":"云环境下多级安全嵌入式信息检索与跟踪","authors":"H. Kimm, J. Ortiz","doi":"10.1109/IEEECloudSummit52029.2021.00012","DOIUrl":null,"url":null,"abstract":"Cloud Computing is emerging technology that provides services of storage and platform software to large organizations, but some of them are still hesitant to shift their setups on the cloud due to security issues and risks. Thus, it is important to address the security issues and problems in cloud systems. In this research we contributed to a multilevel security (MLS) framework based on data sensitivity and security that provides adequate level of data security based on various classifications and categories. The proposed multilevel security embedded information retrieval tool in this paper encompasses suitable access control combined with Security Enhanced Linux (SELinux) that facilitates classification of the data based on subsequent changes in the sensitivity levels of the data and changes in the security measures to cope with the dynamic and vulnerable changes in cloud security threats. To implement the proposed MLS framework, the SELinux system is applied as a testbed to retrieve information and track the history of the data retrieved.","PeriodicalId":54281,"journal":{"name":"IEEE Cloud Computing","volume":"7 1","pages":"25-28"},"PeriodicalIF":0.0000,"publicationDate":"2021-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"2","resultStr":"{\"title\":\"Multilevel Security Embedded Information Retrieval and Tracking on Cloud Environments\",\"authors\":\"H. Kimm, J. Ortiz\",\"doi\":\"10.1109/IEEECloudSummit52029.2021.00012\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Cloud Computing is emerging technology that provides services of storage and platform software to large organizations, but some of them are still hesitant to shift their setups on the cloud due to security issues and risks. Thus, it is important to address the security issues and problems in cloud systems. In this research we contributed to a multilevel security (MLS) framework based on data sensitivity and security that provides adequate level of data security based on various classifications and categories. The proposed multilevel security embedded information retrieval tool in this paper encompasses suitable access control combined with Security Enhanced Linux (SELinux) that facilitates classification of the data based on subsequent changes in the sensitivity levels of the data and changes in the security measures to cope with the dynamic and vulnerable changes in cloud security threats. To implement the proposed MLS framework, the SELinux system is applied as a testbed to retrieve information and track the history of the data retrieved.\",\"PeriodicalId\":54281,\"journal\":{\"name\":\"IEEE Cloud Computing\",\"volume\":\"7 1\",\"pages\":\"25-28\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2021-10-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"2\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"IEEE Cloud Computing\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/IEEECloudSummit52029.2021.00012\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q1\",\"JCRName\":\"Computer Science\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Cloud Computing","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/IEEECloudSummit52029.2021.00012","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"Computer Science","Score":null,"Total":0}
引用次数: 2
摘要
云计算是一种新兴技术,为大型组织提供存储和平台软件服务,但由于安全问题和风险,一些组织仍在犹豫是否将其设置转移到云上。因此,解决云系统中的安全问题非常重要。在这项研究中,我们贡献了一个基于数据敏感性和安全性的多级安全(MLS)框架,该框架提供了基于各种分类和类别的足够级别的数据安全。本文提出的多级安全嵌入式信息检索工具包括适当的访问控制,并结合security Enhanced Linux (SELinux),根据数据敏感性级别的后续变化和安全措施的变化对数据进行分类,以应对云安全威胁的动态和脆弱性变化。为了实现所提出的MLS框架,应用SELinux系统作为检索信息和跟踪检索数据历史的测试平台。
Multilevel Security Embedded Information Retrieval and Tracking on Cloud Environments
Cloud Computing is emerging technology that provides services of storage and platform software to large organizations, but some of them are still hesitant to shift their setups on the cloud due to security issues and risks. Thus, it is important to address the security issues and problems in cloud systems. In this research we contributed to a multilevel security (MLS) framework based on data sensitivity and security that provides adequate level of data security based on various classifications and categories. The proposed multilevel security embedded information retrieval tool in this paper encompasses suitable access control combined with Security Enhanced Linux (SELinux) that facilitates classification of the data based on subsequent changes in the sensitivity levels of the data and changes in the security measures to cope with the dynamic and vulnerable changes in cloud security threats. To implement the proposed MLS framework, the SELinux system is applied as a testbed to retrieve information and track the history of the data retrieved.
期刊介绍:
Cessation.
IEEE Cloud Computing is committed to the timely publication of peer-reviewed articles that provide innovative research ideas, applications results, and case studies in all areas of cloud computing. Topics relating to novel theory, algorithms, performance analyses and applications of techniques are covered. More specifically: Cloud software, Cloud security, Trade-offs between privacy and utility of cloud, Cloud in the business environment, Cloud economics, Cloud governance, Migrating to the cloud, Cloud standards, Development tools, Backup and recovery, Interoperability, Applications management, Data analytics, Communications protocols, Mobile cloud, Private clouds, Liability issues for data loss on clouds, Data integration, Big data, Cloud education, Cloud skill sets, Cloud energy consumption, The architecture of cloud computing, Applications in commerce, education, and industry, Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS), Business Process as a Service (BPaaS)