PRIARMOR: An IaaS Solution for Low-Level Privacy Enforcement in the Cloud

摘要

In this paper, we introduce the IaaS "PriArmor" (Privacy Armor) solution for privacy preservation in the cloud. This approach allows the data owner (tenant and/or end users) to define his privacy requirements and to include regulations policy based on a privacy ontology model that captures all privacy concepts related to the data access and usage in the cloud. The PriArmor approach allows the enforcement of usage control requirements at a low level using a System Call Interception (SCI) technique that enables detecting the intention for policy breaching and inhibiting it. Moreover, the PriArmor approach introduces a data flow model that tracks private data and reflects the existence of derived data through the system to maintain a strong enforcement level. The performed evaluation proves the efficiency of our approach for ensuring policy enforcement in the cloud environment.