Abstract
The proliferation of sensing devices create plethora of data-streams, which in turn can be harnessed to carry out sophisticated analytics to support various real-time applications and services as well as long-term planning, e.g., in the context of intelligent cities or smart homes. A mature cloud infrastructure brings such a vision closer to reality than ever before, as more and more data owners are moving their data to the cloud. Hence, the ability to flexibly and easily control the granularity at which they share their data with other entities become more important. It makes data owners feel comfortable to share to start with, and also provide them a platform to realize different business models or logics. In this paper, we explore some basic operations to flexibly control the access on a data-stream and propose a framework eXACML+ that extends the standard XACML model to achieve the same. We develop a prototype using the commercial StreamBase engine to demonstrate a seamless combination of stream data processing with (a small but important selected set of) fine-grained access control mechanisms, and to evaluate the framework’s efficacy based on experiments in cloud like environments.
This work has been supported by A*Star TSRP grant no. 1021580038 for ‘pCloud: Privacy in data value chains using peer-to-peer primitives’ project. Contact author: Anwitaman Datta (anwitaman@ntu.edu.sg)
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
Geambasu, R., Gribble, S.D., Levy, H.M.: CloudViews: Communal Data Sharing in Public Clouds. In: HotCloud (2009)
Dinh, T.T.A., Wenqiang, W., Datta, A.: City on the sky: Extending xacml for flexible, secure data sharing on the cloud. Journal of Grid Computing (2012)
OASIS: OASIS eXtensible Access Control Markup Language (XACML) TC (2011), http://www.oasis-open.org/committees/xacml/
Ferrari, E., Thuraisingham, B.: Secure database systems. Advanced Databases: Technology and Design (2000)
Abadi, D.J., Carney, D., Cetintemel, U., Cherniack, M., Convey, C., Lee, S., Stonebraker, M., Tatbul, N., Zdonik, S.: Aurora: a new model and architecture for data stream management. In: VLDB (2003)
Babu, S., Widom, J.: Continuous queries over data streams. ACM SIGMOD Record (2001)
StreamBase: Streambase systems inc., http://www.streambase.com/
IBM: Evaluate mathematical expressions quickly and accurately, http://www.ibm.com/developerworks/library/j-w3eval/index.html
Sun Microsystem, Inc.: Sun’s xacml implementation (2004), http://sunxacml.sourceforge.net
Adamic, L.A., Huberman, B.A.: Zipf’s law and the internet. Glottometrics (2002)
Klemm, A., Lindemann, C., Vernon, M.K., Waldhorst, O.P.: Characterizing the query behavior in peer-to-peer file sharing systems. In: SIGCOMM (2004)
Dropbox Inc.: Dropbox, http://www.dropbox.com
Apple Inc.: icloud, http://www.icloud.com
Microsoft Research: Senseweb, http://research.microsoft.com/en-us/projects/senseweb/
Center for Embedded networked sensing (UCLA): Sensorbase, http://sensorbase.org
Ahmad, Y., et al.: Borealis distributed stream processing engine, http://www.cs.brown.edu/research/borealis/public/
Carminati, B., Ferrari, E., Tan, K.L.: Specifying Access Control Policies on Data Streams. In: Kotagiri, R., Radha Krishna, P., Mohania, M., Nantajeewarawat, E. (eds.) DASFAA 2007. LNCS, vol. 4443, pp. 410–421. Springer, Heidelberg (2007)
Carminati, B., Ferrari, E., Tan, K.L.: Enforcing access control over data streams. In: SACMAT (2007)
Nehme, R.V., Rundenseinerr, E.A., Bertino, E.: A security punctuation framework for enforcing access control on streaming data. In: ICDE (2008)
Nehme, R.V., Lim, H.-S., Bertino, E., Rundenseinerr, E.A.: Cstreamshield: a stream-centric approach towards security and privacy in data stream environments. In: SIGMOD (2009)
Lindner, W., Meier, J.: Towards a Secure Data Stream Management System. In: Draheim, D., Weber, G. (eds.) TEAA 2005. LNCS, vol. 3888, pp. 114–128. Springer, Heidelberg (2006)
Lindner, W., et al.: Securing the borealis data stream engine. In: IDEAS (2006)
Power, D., Slaymaker, M., Politou, E., Simpson, A.C.: A Secure Wrapper for OGSA-DAI. In: Sloot, P.M.A., Hoekstra, A.G., Priol, T., Reinefeld, A., Bubak, M. (eds.) EGC 2005. LNCS, vol. 3470, pp. 485–494. Springer, Heidelberg (2005)
Amazon: Amazon elastic compute cloud, http://aws.amazon.com/ec2/
Microsoft: Windows azure platform, http://www.microsoft.com/windowsazure/
APE: Ape project organization, http://www.ape-project.org/
IBM: Ibm corporate, http://www-01.ibm.com/support/docview.wss?uid=swg27009727
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2012 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Wang, W.Q., Anh, D.T.T., Lim, H.B., Datta, A. (2012). Cloud and the City: Facilitating Flexible Access Control over Data-Streams. In: Jonker, W., Petković, M. (eds) Secure Data Management. SDM 2012. Lecture Notes in Computer Science, vol 7482. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-32873-2_5
Download citation
DOI: https://doi.org/10.1007/978-3-642-32873-2_5
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-32872-5
Online ISBN: 978-3-642-32873-2
eBook Packages: Computer ScienceComputer Science (R0)