Towards secure dataflow processing in open distributed systems

Juan Du, Wei Wei, Xiaohui Gu, Ting Yu

Research output: Chapter in Book/Report/Conference proceedingConference contribution

11 Citations (Scopus)

Abstract

Open distributed systems such as service oriented architecture and cloud computing have emerged as promising platforms to deliver software as a service to users. However, for many security sensitive applications such as critical data processing, trust management poses significant challenges for migrating those critical applications into open distributed systems. In this paper, we present the design and implementation of a new secure dataflow processing system that aims at providing trustworthy continuous data processing in multi-party open distributed systems. We identify a set of major security attacks that can compromise the integrity of dataflow processing and provide effective protection mechanisms to counter those attacks. We have implemented a prototype of the secure dataflow processing framework and tested it on the PlanetLab testbed. Our experimental results show that our protection schemes are effective and impose low performance impact for dataflow processing in large-scale open distributed systems.

Original languageEnglish
Title of host publicationProceedings of the ACM Conference on Computer and Communications Security
Pages67-72
Number of pages6
DOIs
Publication statusPublished - 1 Dec 2009
Externally publishedYes
Event2009 ACM Workshop on Scalable Trusted Computing, STC '09, Co-located with the 16th ACM Computer and Communications Security Conference, CCS'09 - Chicago, IL, United States
Duration: 9 Nov 200913 Nov 2009

Other

Other2009 ACM Workshop on Scalable Trusted Computing, STC '09, Co-located with the 16th ACM Computer and Communications Security Conference, CCS'09
CountryUnited States
CityChicago, IL
Period9/11/0913/11/09

Fingerprint

Processing
Service oriented architecture (SOA)
Cloud computing
Testbeds
Computer systems

Keywords

  • Cloud computing
  • Secure component composition
  • Secure data processing
  • Service oriented architecture

ASJC Scopus subject areas

  • Software
  • Computer Networks and Communications

Cite this

Du, J., Wei, W., Gu, X., & Yu, T. (2009). Towards secure dataflow processing in open distributed systems. In Proceedings of the ACM Conference on Computer and Communications Security (pp. 67-72) https://doi.org/10.1145/1655108.1655120

Towards secure dataflow processing in open distributed systems. / Du, Juan; Wei, Wei; Gu, Xiaohui; Yu, Ting.

Proceedings of the ACM Conference on Computer and Communications Security. 2009. p. 67-72.

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Du, J, Wei, W, Gu, X & Yu, T 2009, Towards secure dataflow processing in open distributed systems. in Proceedings of the ACM Conference on Computer and Communications Security. pp. 67-72, 2009 ACM Workshop on Scalable Trusted Computing, STC '09, Co-located with the 16th ACM Computer and Communications Security Conference, CCS'09, Chicago, IL, United States, 9/11/09. https://doi.org/10.1145/1655108.1655120
Du J, Wei W, Gu X, Yu T. Towards secure dataflow processing in open distributed systems. In Proceedings of the ACM Conference on Computer and Communications Security. 2009. p. 67-72 https://doi.org/10.1145/1655108.1655120
Du, Juan ; Wei, Wei ; Gu, Xiaohui ; Yu, Ting. / Towards secure dataflow processing in open distributed systems. Proceedings of the ACM Conference on Computer and Communications Security. 2009. pp. 67-72
@inproceedings{cc3c13e8e7f34616841d4066f0925d34,
title = "Towards secure dataflow processing in open distributed systems",
abstract = "Open distributed systems such as service oriented architecture and cloud computing have emerged as promising platforms to deliver software as a service to users. However, for many security sensitive applications such as critical data processing, trust management poses significant challenges for migrating those critical applications into open distributed systems. In this paper, we present the design and implementation of a new secure dataflow processing system that aims at providing trustworthy continuous data processing in multi-party open distributed systems. We identify a set of major security attacks that can compromise the integrity of dataflow processing and provide effective protection mechanisms to counter those attacks. We have implemented a prototype of the secure dataflow processing framework and tested it on the PlanetLab testbed. Our experimental results show that our protection schemes are effective and impose low performance impact for dataflow processing in large-scale open distributed systems.",
keywords = "Cloud computing, Secure component composition, Secure data processing, Service oriented architecture",
author = "Juan Du and Wei Wei and Xiaohui Gu and Ting Yu",
year = "2009",
month = "12",
day = "1",
doi = "10.1145/1655108.1655120",
language = "English",
isbn = "9781605587882",
pages = "67--72",
booktitle = "Proceedings of the ACM Conference on Computer and Communications Security",

}

TY - GEN

T1 - Towards secure dataflow processing in open distributed systems

AU - Du, Juan

AU - Wei, Wei

AU - Gu, Xiaohui

AU - Yu, Ting

PY - 2009/12/1

Y1 - 2009/12/1

N2 - Open distributed systems such as service oriented architecture and cloud computing have emerged as promising platforms to deliver software as a service to users. However, for many security sensitive applications such as critical data processing, trust management poses significant challenges for migrating those critical applications into open distributed systems. In this paper, we present the design and implementation of a new secure dataflow processing system that aims at providing trustworthy continuous data processing in multi-party open distributed systems. We identify a set of major security attacks that can compromise the integrity of dataflow processing and provide effective protection mechanisms to counter those attacks. We have implemented a prototype of the secure dataflow processing framework and tested it on the PlanetLab testbed. Our experimental results show that our protection schemes are effective and impose low performance impact for dataflow processing in large-scale open distributed systems.

AB - Open distributed systems such as service oriented architecture and cloud computing have emerged as promising platforms to deliver software as a service to users. However, for many security sensitive applications such as critical data processing, trust management poses significant challenges for migrating those critical applications into open distributed systems. In this paper, we present the design and implementation of a new secure dataflow processing system that aims at providing trustworthy continuous data processing in multi-party open distributed systems. We identify a set of major security attacks that can compromise the integrity of dataflow processing and provide effective protection mechanisms to counter those attacks. We have implemented a prototype of the secure dataflow processing framework and tested it on the PlanetLab testbed. Our experimental results show that our protection schemes are effective and impose low performance impact for dataflow processing in large-scale open distributed systems.

KW - Cloud computing

KW - Secure component composition

KW - Secure data processing

KW - Service oriented architecture

UR - http://www.scopus.com/inward/record.url?scp=74249095734&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=74249095734&partnerID=8YFLogxK

U2 - 10.1145/1655108.1655120

DO - 10.1145/1655108.1655120

M3 - Conference contribution

SN - 9781605587882

SP - 67

EP - 72

BT - Proceedings of the ACM Conference on Computer and Communications Security

ER -