Trusting the Cloud: A PROV + RBAC Approach

This paper describes a provenance-based access control system for the cloud. The system relies on provenance (PROV-DM, PROV-O) and access-control models (RBAC) together with a distributed rule-based mechanism. The system allows rule propagation (in the cloud) and uses a central execution engine for enforcing security and trustworthiness. This paper provides a comparison between PROV-DM and PROV-O in terms of efficiency and expressiveness regarding Provenance graphs.