C2L: A formal policy language for secure cloud configurations

Jayaraj Poroor; Bharat Jayaraman

doi:10.1016/j.procs.2012.06.064

C²L: A formal policy language for secure cloud configurations

Jayaraj Poroor
, Bharat Jayaraman

Department of Computer Science and Engineering

University at Buffalo

Amrita Vishwa Vidyapeetham

Research output: Contribution to journal › Conference article › peer-review

5 Scopus citations

Abstract

We present a formal policy language (C²L) for stating permissible cloud configurations. Syntactically, C²L is based upon a spatio-temporal modal logic and provides a concise and clear statement of policy constraints for colocation, hosting, migration, security, and availability. We illustrate the language with a number of policy specification examples and also present an algorithm for verifying whether a cloud configuration along with its history satisfies a C²L policy specification. We provide complexity analysis of the algorithm, and conclude that C²L is a useful and viable formalism for specifying and verifying cloud configuration policies.

Original language	English
Pages (from-to)	499-506
Number of pages	8
Journal	Procedia Computer Science
Volume	10
DOIs	https://doi.org/10.1016/j.procs.2012.06.064
State	Published - 2012
Event	3rd International Conference on Ambient Systems, Networks and Technologies, ANT 2012 and 9th International Conference on Mobile Web Information Systems, MobiWIS 2012 - Niagara Falls, ON, Canada Duration: Aug 27 2012 → Aug 29 2012

Keywords

Cloud computing
Mobile ambients
Policy language
Security
Spatio-temporal logic

Access to Document

10.1016/j.procs.2012.06.064

Cite this

@article{7563d75d7052476a8aa6d347d7db17cc,

title = "C2L: A formal policy language for secure cloud configurations",

abstract = "We present a formal policy language (C2L) for stating permissible cloud configurations. Syntactically, C2L is based upon a spatio-temporal modal logic and provides a concise and clear statement of policy constraints for colocation, hosting, migration, security, and availability. We illustrate the language with a number of policy specification examples and also present an algorithm for verifying whether a cloud configuration along with its history satisfies a C2L policy specification. We provide complexity analysis of the algorithm, and conclude that C2L is a useful and viable formalism for specifying and verifying cloud configuration policies.",

keywords = "Cloud computing, Mobile ambients, Policy language, Security, Spatio-temporal logic",

author = "Jayaraj Poroor and Bharat Jayaraman",

year = "2012",

doi = "10.1016/j.procs.2012.06.064",

language = "English",

volume = "10",

pages = "499--506",

journal = "Procedia Computer Science",

issn = "1877-0509",

publisher = "Elsevier B.V.",

note = "3rd International Conference on Ambient Systems, Networks and Technologies, ANT 2012 and 9th International Conference on Mobile Web Information Systems, MobiWIS 2012 ; Conference date: 27-08-2012 Through 29-08-2012",

}

TY - JOUR

T1 - C2L

T2 - 3rd International Conference on Ambient Systems, Networks and Technologies, ANT 2012 and 9th International Conference on Mobile Web Information Systems, MobiWIS 2012

AU - Poroor, Jayaraj

AU - Jayaraman, Bharat

PY - 2012

Y1 - 2012

N2 - We present a formal policy language (C2L) for stating permissible cloud configurations. Syntactically, C2L is based upon a spatio-temporal modal logic and provides a concise and clear statement of policy constraints for colocation, hosting, migration, security, and availability. We illustrate the language with a number of policy specification examples and also present an algorithm for verifying whether a cloud configuration along with its history satisfies a C2L policy specification. We provide complexity analysis of the algorithm, and conclude that C2L is a useful and viable formalism for specifying and verifying cloud configuration policies.

AB - We present a formal policy language (C2L) for stating permissible cloud configurations. Syntactically, C2L is based upon a spatio-temporal modal logic and provides a concise and clear statement of policy constraints for colocation, hosting, migration, security, and availability. We illustrate the language with a number of policy specification examples and also present an algorithm for verifying whether a cloud configuration along with its history satisfies a C2L policy specification. We provide complexity analysis of the algorithm, and conclude that C2L is a useful and viable formalism for specifying and verifying cloud configuration policies.

KW - Cloud computing

KW - Mobile ambients

KW - Policy language

KW - Security

KW - Spatio-temporal logic

UR - https://www.scopus.com/pages/publications/84886366269

U2 - 10.1016/j.procs.2012.06.064

DO - 10.1016/j.procs.2012.06.064

M3 - Conference article

SN - 1877-0509

VL - 10

SP - 499

EP - 506

JO - Procedia Computer Science

JF - Procedia Computer Science

Y2 - 27 August 2012 through 29 August 2012

ER -

C²L: A formal policy language for secure cloud configurations

Abstract

Keywords

Access to Document

Other files and links

Fingerprint

Cite this