| 本文已被：浏览 4866次 下载 6736次 |
码上扫一扫！ |
|
|
| 服务组合安全隐私信息流静态分析方法 |
|
彭焕峰1,2, 黄志球1, 刘林源3, 李勇1, 柯昌博4
|
|
1.南京航空航天大学 计算机科学与技术学院, 江苏 南京 211106;2.南京工程学院 计算机工程学院, 江苏 南京 211167;3.南京审计大学 电子商务系, 江苏 南京 211815;4.南京邮电大学 计算机学院, 江苏 南京 210023
|
|
| 摘要: |
| 用户为使用服务组合提供的功能，需要提供必要的个人隐私数据.由于组合的业务逻辑对用户是透明的，且用户与成员服务之间缺乏隐私数据使用的相关协议，如何保证组合执行过程中不发生用户隐私信息的非法泄露，成为当前服务计算领域的研究热点之一.针对隐私保护特征，提出一种服务组合安全隐私信息流静态分析方法.首先，从服务信誉度、隐私数据使用目的及保留期限这3个维度提出一种面向服务组合的隐私信息流安全模型；其次，采用支持隐私信息流分析的隐私工作流网（privacy workflow net，简称PWF-net）构建服务组合模型，并通过静态分析算法分析组合执行路径，检测组合的执行是否会发生用户隐私信息的非法泄露；最后，通过实例分析说明了方法的有效性，并对方法性能进行了实验分析.与现有的相关工作相比，针对隐私保护特征提出了隐私信息流安全模型，且分析方法考虑了隐私数据项聚合问题，从而能够更为有效地防止用户隐私信息非法泄露. |
| 关键词: 服务组合 隐私保护 信息流安全 安全模型 静态分析 工作流网 |
| DOI：10.13328/j.cnki.jos.005276 |
| 分类号: |
| 基金项目:国家自然科学基金（61772270，61602262，61562087）；国家高技术研究发展计划（863）（2015AA015303）；江苏省自然科学基金（BK20150865，BK20130735）；江苏省高校自然科学基金（15KJD520001，13KJB520011） |
|
| Static Analysis Method of Secure Privacy Information Flow for Service Composition |
|
PENG Huan-Feng1,2, HUANG Zhi-Qiu1, LIU Lin-Yuan3, LI Yong1, KE Chang-Bo4
|
|
1.College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing 211106, China;2.College of Computer Engineering, Nanjing Institute of Technology, Nanjing 211167, China;3.Department of E-Commerce, Nanjing Audit University, Nanjing 211815, China;4.College of Computer, Nanjing University of Posts and Telecommunications, Nanjing 210023, China
|
| Abstract: |
| Many service composition scenarios involve the sharing of user's privacy data. Due to the transparency of composition's business logic and lack of privacy protocol between user and member service, how to prevent the leakage of user privacy information has become a hot research topic in the field of service-oriented computing. A static analysis method of secure privacy information flow for service composition is proposed in this article according to the characteristics of privacy protection. Firstly, a security model is developed to formalize the security policy of privacy information flow on three aspects:service reputation, retention and purpose. Then, the composition is modeled with privacy workflow net, which gives support to the analysis of privacy information flow, and the detection of privacy information leakage is performed by analyzing execution paths of composition. Finally, a case study is included to demonstrate the effectiveness of the proposed method, and the performance experiment is also presented. Compared with the existing relevant works, the security model proposed reflects the characteristics of privacy protection, and the analysis method is able to deal with issues caused by the aggregation of privacy data items. Therefore, the application of this method can prevent the information leakage more efficiently. |
| Key words: service composition privacy protection information flow security security model static analysis workflow net |
