{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,10]],"date-time":"2026-01-10T07:21:00Z","timestamp":1768029660368,"version":"3.49.0"},"reference-count":60,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2017,7,1]],"date-time":"2017-07-01T00:00:00Z","timestamp":1498867200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"DOI":"10.13039\/501100000266","name":"UK Engineering and Physical Sciences Research Council","doi-asserted-by":"publisher","award":["EP\/K011510"],"award-info":[{"award-number":["EP\/K011510"]}],"id":[{"id":"10.13039\/501100000266","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Cloud Comput."],"published-print":{"date-parts":[[2017,7,1]]},"DOI":"10.1109\/tcc.2015.2489211","type":"journal-article","created":{"date-parts":[[2015,10,9]],"date-time":"2015-10-09T18:50:23Z","timestamp":1444416623000},"page":"472-484","source":"Crossref","is-referenced-by-count":55,"title":["Camflow: Managed Data-Sharing for Cloud Services"],"prefix":"10.1109","volume":"5","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6876-1306","authenticated-orcid":false,"given":"Thomas F. J.-M.","family":"Pasquier","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jatinder","family":"Singh","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David","family":"Eyers","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jean","family":"Bacon","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/2484313.2484328"},{"key":"ref38","article-title":"Linux-CR: Transparent application Checkpoint-restart in linux","author":"laadan","year":"0","journal-title":"Proc Linux Symp"},{"key":"ref33","first-page":"13","article-title":"Paranoid penguin: An introduction to Novell AppArmor","volume":"2006","author":"bauer","year":"2006","journal-title":"Linux J"},{"key":"ref32","first-page":"43","article-title":"Implementing selinux as a linux security module","volume":"1","author":"smalley","year":"2001","journal-title":"NAI Labs Report"},{"key":"ref31","article-title":"LSM: Generalize existing module stacking","author":"schaufler","year":"0","journal-title":"Linux Weekly News"},{"key":"ref30","first-page":"7","article-title":"Linux security modules Enhancements: Module stacking framework and TCP state transition hooks\n for State-driven NIDS","volume":"7","author":"quaritsch","year":"2004","journal-title":"Inf Commun Security"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-013-0884-0"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102164"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/996943.996944"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586141"},{"key":"ref60","article-title":"Security enhanced (SE) android: Bringing flexible MAC to android","author":"smalley","year":"0","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2638548"},{"key":"ref27","article-title":"A perspective on information-flow control","author":"hedin","year":"0","journal-title":"Software Safety and Security"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/FITS.2003.1264934"},{"key":"ref2","first-page":"225","article-title":"KVM: The linux virtual machine monitor","volume":"1","author":"kivity","year":"0","journal-title":"Proc Linux Symp"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1165389.945462"},{"key":"ref20","first-page":"377","article-title":"Towards\n accountable management of identity and privacy: Sticky policies and enforceable tracing services","author":"casassa-mont","year":"0","journal-title":"Proc 14th Int Workshop Database Expert Syst Appl"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/1463342.1463343"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1179601.1179609"},{"key":"ref24","article-title":"MrLazy: Lazy runtime label propagation\n for MapReduce","author":"akoush","year":"0","journal-title":"Proc of Workshop on Hot Topics in Cloud Computing"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-014-0258-5"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30108-0_14"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2465351.2465357"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/RIOT.2015.7104903"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2000.898865"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6749"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/1322432.1322433"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/IC2E.2015.71"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/btq675"},{"key":"ref55","first-page":"494","article-title":"Relayfs: An efficient unified approach for transmitting data from\n kernel to user space","author":"zanussi","year":"0","journal-title":"Proc Linux Symp"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2015.69"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/DSR.2011.6026885"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/2382536.2382549"},{"key":"ref10","article-title":"Integrity considerations for secure computer systems","author":"biba","year":"1977"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/268998.266669"},{"key":"ref40","first-page":"47","article-title":"Measuring function duration with ftrace","author":"bird","year":"0","journal-title":"Proc Japan Linux Symp"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2517968.2517969"},{"key":"ref13","first-page":"249","article-title":"xBook:\n Redesigning privacy control in social networking platforms","author":"singh","year":"0","journal-title":"Proc 18th Conf USENIX Security Symp"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294293"},{"key":"ref15","first-page":"501","article-title":"$\\pi$\nBox: A platform for\n Privacy-preserving apps.","author":"lee","year":"0","journal-title":"Proc Symp Netw Syst Design Implementation"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/BDCloud.2014.89"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2619091"},{"key":"ref18","article-title":"PHP aspis: Using partial taint tracking to protect against injection attacks","author":"papagiannis","year":"0","journal-title":"Proc 2nd USENIX Conf Web Appl Develop"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.26"},{"key":"ref4","first-page":"48","article-title":"Using openstack for an open cloud\n exchange (OCX)","author":"desnoyers","year":"0","journal-title":"Proc Int Conf Cloud Eng"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2014.51"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1093\/acprof:oso\/9780199671670.001.0001"},{"key":"ref5","author":"mineraud","year":"2015"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/360051.360056"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2011.225"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/IC2E.2015.13"},{"key":"ref9","article-title":"Secure computer systems: Mathematical foundations and model","author":"bell","year":"1973"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.2807"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/2611286.2611310"},{"key":"ref48","first-page":"12","article-title":"Abstractions for usable information flow control in Aeolus","author":"cheng","year":"0","journal-title":"Proc USENIX Annu Tech Conf"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-74835-9_18"},{"key":"ref42","first-page":"3","article-title":"Towards trusted cloud computing","author":"santos","year":"0","journal-title":"Proc Conf Hot Topics Cloud Comput"},{"key":"ref41","first-page":"9","article-title":"Bootstrapping trust in a” trusted” platform","author":"parno","year":"0","journal-title":"Proc 3rd Conf Hot Topics Security"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/IC2E.2015.32"},{"key":"ref43","first-page":"305","article-title":"vTPM: Virtualizing the trusted platform module","author":"berger","year":"0","journal-title":"Proc 15th Conf USENIX Security Symp"}],"container-title":["IEEE Transactions on Cloud Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6245519\/8024042\/07295590.pdf?arnumber=7295590","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,11]],"date-time":"2021-10-11T02:35:10Z","timestamp":1633919710000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7295590\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,7,1]]},"references-count":60,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tcc.2015.2489211","relation":{},"ISSN":["2168-7161"],"issn-type":[{"value":"2168-7161","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,7,1]]}}}