This paper presents TracE2E, a middleware written in Rust, that can provide both data explainability and compliance across multiple nodes. By mediating inputs and outputs of processes, TracE2E records provenance information and enforces data-protection policies (e.g., confidentiality, integrity) that depend on the recorded provenance. Unlike existing approaches that necessitate substantial application modifications, TracE2E is designed for easy integration into existing and future applications through a wrapper of the Rust standard library's IO module. We describe how TracE2E consistently records provenance information across nodes, and we demonstrate how the compliance layer of TracE2E can accommodate the enforcement of multiple policies.
翻译:本文提出TracE2E,一种用Rust编写的中间件,能够在多个节点上同时提供数据可解释性与合规性保障。通过协调处理过程的输入与输出,TracE2E记录数据溯源信息,并依据记录的溯源信息执行数据保护策略(如机密性、完整性)。与现有需要大幅修改应用程序的方案不同,TracE2E通过封装Rust标准库的IO模块,可轻松集成到现有及未来的应用系统中。我们阐述了TracE2E如何在多个节点间一致地记录溯源信息,并展示了其合规层如何支持多种策略的执行。