Paper Abstract and Keywords |
Presentation |
2022-03-10 12:05
Implementation and evaluation of decentralized information flow control system using container-based virtualization Ayato Tachibana, Hidetsugu Irie, Shuichi Sakai (UTokyo) CPSY2021-47 DC2021-81 |
Abstract |
(in Japanese) |
(See Japanese page) |
(in English) |
Decentralized Information Flow Control(DIFC) is a method to prevent vulnerabilities more effectively than Mandatory Access Control(MAC) by allowing application developers to set policies.
However, the implementation of DIFC using existing methods requires modifications to the operating system, which creates a high barrier to implementation. As a method that does not require any modification to the OS, we proposed a method of implementing the DIFC system on a Container-based virtualization environment.
In this study, we implemented this method on a Container-based virtualization environment and evaluated it by running a practical web application on the system. The results of the security evaluation showed that the method can prevent vulnerabilities of a practical web application. In addition, the performance evaluation showed that the overhead was about 33% compared to the existing container environment, and there was less impact than existing methods. |
Keyword |
(in Japanese) |
(See Japanese page) |
(in English) |
Directory Traversal / Information Flow Tracking / Access Control / Decentralized Information Flow Control (DIFC) / Container-based virtualization / gVisor / / |
Reference Info. |
IEICE Tech. Rep., vol. 121, no. 425, CPSY2021-47, pp. 14-19, March 2022. |
Paper # |
CPSY2021-47 |
Date of Issue |
2022-03-03 (CPSY, DC) |
ISSN |
Online edition: ISSN 2432-6380 |
Copyright and reproduction |
All rights are reserved and no part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without permission in writing from the publisher. Notwithstanding, instructors are permitted to photocopy isolated articles for noncommercial classroom use without fee. (License No.: 10GA0019/12GB0052/13GB0056/17GB0034/18GB0034) |
Download PDF |
CPSY2021-47 DC2021-81 |
Conference Information |
Committee |
CPSY DC IPSJ-SLDM IPSJ-EMB IPSJ-ARC |
Conference Date |
2022-03-10 - 2022-03-11 |
Place (in Japanese) |
(See Japanese page) |
Place (in English) |
Online |
Topics (in Japanese) |
(See Japanese page) |
Topics (in English) |
ETNET2021 |
Paper Information |
Registration To |
CPSY |
Conference Code |
2022-03-CPSY-DC-SLDM-EMB-ARC |
Language |
Japanese |
Title (in Japanese) |
(See Japanese page) |
Sub Title (in Japanese) |
(See Japanese page) |
Title (in English) |
Implementation and evaluation of decentralized information flow control system using container-based virtualization |
Sub Title (in English) |
|
Keyword(1) |
Directory Traversal |
Keyword(2) |
Information Flow Tracking |
Keyword(3) |
Access Control |
Keyword(4) |
Decentralized Information Flow Control (DIFC) |
Keyword(5) |
Container-based virtualization |
Keyword(6) |
gVisor |
Keyword(7) |
|
Keyword(8) |
|
1st Author's Name |
Ayato Tachibana |
1st Author's Affiliation |
The University of Tokyo (UTokyo) |
2nd Author's Name |
Hidetsugu Irie |
2nd Author's Affiliation |
The University of Tokyo (UTokyo) |
3rd Author's Name |
Shuichi Sakai |
3rd Author's Affiliation |
The University of Tokyo (UTokyo) |
4th Author's Name |
|
4th Author's Affiliation |
() |
5th Author's Name |
|
5th Author's Affiliation |
() |
6th Author's Name |
|
6th Author's Affiliation |
() |
7th Author's Name |
|
7th Author's Affiliation |
() |
8th Author's Name |
|
8th Author's Affiliation |
() |
9th Author's Name |
|
9th Author's Affiliation |
() |
10th Author's Name |
|
10th Author's Affiliation |
() |
11th Author's Name |
|
11th Author's Affiliation |
() |
12th Author's Name |
|
12th Author's Affiliation |
() |
13th Author's Name |
|
13th Author's Affiliation |
() |
14th Author's Name |
|
14th Author's Affiliation |
() |
15th Author's Name |
|
15th Author's Affiliation |
() |
16th Author's Name |
|
16th Author's Affiliation |
() |
17th Author's Name |
|
17th Author's Affiliation |
() |
18th Author's Name |
|
18th Author's Affiliation |
() |
19th Author's Name |
|
19th Author's Affiliation |
() |
20th Author's Name |
|
20th Author's Affiliation |
() |
Speaker |
Author-1 |
Date Time |
2022-03-10 12:05:00 |
Presentation Time |
20 minutes |
Registration for |
CPSY |
Paper # |
CPSY2021-47, DC2021-81 |
Volume (vol) |
vol.121 |
Number (no) |
no.425(CPSY), no.426(DC) |
Page |
pp.14-19 |
#Pages |
6 |
Date of Issue |
2022-03-03 (CPSY, DC) |
|