Guardat: A foundation for policy-protected data

摘要: We present Guardat, an architecture that enforces rich data access policies at the storage layer. Users, application developers and system administrators can provide per-file to Guardat. Guardat these provides attestations about state of stored files. With integrity, confidentiality accounting rules for a collection files be stated as single declarative policy. Policy enforcement relies only on integrityof controller any external policy dependencies; it does not depend correct software, configuration operator actions in other parts system. allows developers, third-party hosting platform providers enforce concise, system-wide protection based small trusted computing base (TCB), demonstrate their compliance party trusts design prototype implementation show experimentally space time overhead making checks is low, discuss applications policies.