Congratulations to Charilaos, Narges and Jesper for their paper being accepted at the 1st IEEE International Conference on Autonomic Computing and Self-Organizing Systems (ACSOS 2020)!
Please find below additional information about their research.
Modern software systems and their corresponding
architectures are decentralized, distributed, and dynamic. As
a consequence, decentralized mechanisms are also required to
ensure security in such architectures. Decentralized Information
Flow Control (DIFC) is a mechanism to control information
flow in distributed systems. However, DIFC mechanisms require
the resolution of specific centralized control and trust issues. In
this paper, we propose an adaptive, trust-aware, decentralized
information flow approach that incorporates trust in DIFC for
decentralized systems. We employ decentralized feedback loops
to enable decentralized control and adaptive trust assignments.
In our approach, adaptivity mitigates two aspects of systems
dynamics that cause uncertainty: the ever-changing nature of
trust and the system openness. We formalize our trust-aware
DIFC model and instantiate two decentralized feedback loop
architectures to implement it. We discuss the design and implementation
considerations and evaluate the effectiveness of
adaptive trust-aware DIFC on a set of decentralized architectures
and a microservices-based system.