Dynamic Control Method for Tenants’ Sensitive Information Flow Based on Virtual Boundary Recognition

Abstract

In the cloud environment, owing to the large-scale sharing of the upper application instance and the underlying virtual machine resources, the tenants' information flow boundary in the shared virtual machine is fuzzy and difficult to identify. In addition, protection of tenant information flow between processes is inadequate, resulting in the leakage of sensitive information of tenants. Therefore, a dynamic control method for tenants' sensitive information flow based on virtual boundary recognition is proposed. By analyzing the behavior and operation log of tenants, the behavior feature vectors of tenants are constructed, and an automatic recognition algorithm of tenant virtual boundary based on the dynamic spiking neural network is designed. This algorithm can realize dynamic identification of the tenant virtual security boundary when the application service demand changes dynamically. Further, combined with the concept of centralized and decentralized information flow control, a dynamic control method of sensitive information flow is established. The security label is formally defined by using the lattice structure, and the control rules of tenants' information flow and the rules of tenant label encryption-declassification are designed. Thus, the independent, dynamic and secure control of tenants' information flow inside and outside the tenant virtual boundary. Finally, the detailed design of a dynamic security control application system for cloud tenants' sensitive information flow is provided. Experiments confirm that the proposed algorithm can identify the security boundary of tenants more accurately and efficiently than the traditional spiking neural network classification methods. Further, the security and effectiveness of the method is verified by the intransitive noninterference theory and the experiment of information flow control.

Mathematical Methods for Sensitive Information Mining Method of News Communication Platform Based on Big Data IOT Analysis

“…News headlines contain a lot of classified information, which can let the public know the basic situation of the event in the briefest prompt and evaluation, and guide the public to further read [7]. It is a high generalization of the content of the web page, and has a high accuracy when used to classify news web pages [8]. Topic is the supporting point of Title Construction, and the title of the core event under the same topic is the same or similar to that of its related follow-up reports.…”

Tenant-Led Ciphertext Information Flow Control for Cloud Virtual Machines

“…With the popularity of cloud computing, studies have been conducted [8]- [15] on the combination of information flow control technology and cloud computing environment. In [8], a loadable Linux kernel module FlowK was designed to provide a mechanism to enforce information flow policies at runtime.…”

“…Due to the sharing of virtual machine resources, it is difficult to identify the information flow boundary of tenant virtual machines. The authors of [15] proposed a dynamic control method for tenant sensitive information flow based on virtual boundary recognition, which combines the concepts of centralized and decentralized information flow control. Thus, a dynamic control method was established for sensitive information flow.…”

A Novel Framework for Cloud based Virtual Machine Security by Change Management using Machine

“…The second characteristics of the proposed framework is to track the changing nature of the data as mentioned in the work by N. E. Moussaid et al [13]. The final characteristics must comply with the deployed virtual machinebased applications hosted on the cloud platforms as suggested by X. Lu et al [14]. Thus, this work considers all the recommendations from the parallel research outcomes and further produces the proposed framework for detection and prevention of the attacks on the cloud application, in tern the virtual machine security.…”