Pasquier, ThomasSingh, JatinderBacon, Jean2018-04-252015Pasquier, Thomas, Jatinder Singh, and Jean Bacon. 2015. Clouds of Things need Information Flow Control with Hardware Roots of Trust. In 2015 IEEE 7th International Conference on Cloud Computing Technology and Science (CloudCom), Vancouver, BC, Canada, Nov. 30 - Dec. 3, 2015.http://nrs.harvard.edu/urn-3:HUL.InstRepos:36305748There is a clear, outstanding need for new security mechanisms that allow data to be managed and controlled within the cloud-enabled Internet of Things. Towards this, we propose an approach based on Information Flow Control (IFC) that allows: (1) the continuous, end-to-end enforcement of data flow policy, and (2) the generation of provenance-like audit logs to demon- strate policy adherence and contractual/regulatory compliance. Further, we discuss the role of Trusted Platform Modules (TPMs) in supporting such a system, by providing hardware roots of trust. TPMs can be leveraged to validate software configurations, including the IFC enforcement mechanism, both in the cloud and externally via remote attestation.en-USInternet of ThingsInformation Flow ControlProvenanceHardware Roots of TrustRemote AttestatioConference Paper2017-12-0720152018-04-2510.1109/CloudCom.2015.41