Data privacy and security is becoming one of the most important subjects for IT companies, as it has the potential to shift their reputation and therefore influence their value on the market. However, on a large scale, namely in Big Data platforms, securing data may be a major challenge as it can limit the system's performance. Therefore, finding solutions that enable a compromise between security and performance is a must. In this paper, we present a framework called Distributed Cipher Chaining (DCC) which allows the creation of flexible encryption schemes that can offer configurable levels of availability. We also present a local multi-threaded implementation as well as a distributed multi-process implementation and the advantages and applications of each one. We show that our solution is well adapted to large files as it outperforms state-of-the art methods while improving the diffusion rate.

SUMMARY Noninterference is a strong security policy that enforces confidentiality and integrity. Many solutions are proposed in the state of the art for verifying this policy in programs, but few tools are proposed to implement it. In this paper, we define a high‐level model called Component Information Flow, and we develop the tools that simplify distributed secure system development and deployment. The developer focuses on developing the functional part of his or her system and defines his or her system security properties by using a high‐level configuration. When this configuration is validated, that is, no security leak is detected, the system security code is generated. To validate and demonstrate the effectiveness of our approach, we apply the Component Information Flow tools to a classical Web service use case. Copyright © 2012 John Wiley & Sons, Ltd.