Controlling information flows in SaaS cloud services

Information flow control prevents information leakage during software execution. This paper presents the model CloudIFC to control information flows in the SaaS level of cloud services. It uses groups to prevent exchanging incomparable information and uses security level numbers to prevent information leakage. The model strictly controls output statements because only output may leak information. As to other statements, CloudIFC uses join operations to adjust security levels. To reduce runtime overhead, CloudIFC applied MapReduce computing paradigm.