A provenance-based policy control framework for cloud services

Moreau, Luc and Ali, Mufajjul (2014) A provenance-based policy control framework for cloud services. IPAW'2014: 5th International Provenance and Annotation Workshop, Cologne, Germany. 09 - 13 Jun 2014. 12 pp .

Record type: Conference or Workshop Item (Paper)

Abstract

In the context of software, provenance holds the key to retaining a mirror instance of the lifespan of a service, which can be replayed/reproduced from the beginning. This entails the nature of invocations that took place, how/where the data were created, modified, updated and the user's engagement with the service. With such an encyclopedia of information, it opens up a diversity of value-added features (compliance control, accountability) that can improve the usability of a service.

In this paper, we extend our previous work on the provenance-based policy language (cProvl) and model (cProv) by proposing a preliminary policy control framework. The framework provides the necessary building blocks for integrating and developing services that are able to generate and use provenance data for provenance-based compliance control, which runs on a XACML engine. We demonstrate the capability of the framework by applying it to a service case, and conduct benchmarks to determine its scalability and performance.

Text

A Provenance-based Policy Control Framework.pdf - Accepted Manuscript

Available under License University of Southampton Accepted Manuscript Licence.

Download (445kB)