Visible to the public Cryptographically Secure Information Flow Control on Key-Value Stores

TitleCryptographically Secure Information Flow Control on Key-Value Stores
Publication TypeConference Paper
Year of Publication2017
AuthorsWaye, Lucas, Buiras, Pablo, Arden, Owen, Russo, Alejandro, Chong, Stephen
Conference NameProceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security
Conference LocationNew York, NY, USA
ISBN Number978-1-4503-4946-8
Keywordscryptography, digital signatures, Human Behavior, information-flow control, Key Management, Metrics, pubcrawl, resilience, Resiliency, Scalability

We present Clio, an information flow control (IFC) system that transparently incorporates cryptography to enforce confidentiality and integrity policies on untrusted storage. Clio insulates developers from explicitly manipulating keys and cryptographic primitives by leveraging the policy language of the IFC system to automatically use the appropriate keys and correct cryptographic operations. We prove that Clio is secure with a novel proof technique that is based on a proof style from cryptography together with standard programming languages results. We present a prototype Clio implementation and a case study that demonstrates Clio's practicality.

Citation Keywaye_cryptographically_2017