Cloud computing aims to revolutionise traditional ways of service delivery. It enables companies, research institutions and government organisations to consolidate services in a shared ICT infrastructure supported by cloud providers. This reduces ownership and management costs, allows services to scale on-demand and improves energy efficiency. Security considerations, however, are a practical obstacle for the adoption of cloud computing. Cloud providers consolidate data from multiple services, which may result in wide-spread data disclosure when their security is compromised. Strong cloud security is hard to achieve because it requires that the cloud platform cannot be compromised by hosted applications and that applications belonging to different cloud tenants are isolated to prevent data leakage. It is even harder for federated clouds, i.e. when a cloud provider uses another provider for some of its services. This is common in a Software-as-a-Service (SaaS) model, in which a provider offers a high-level service that can be reused by other providers. Both clients and cloud providers have an incentive to control the propagation of sensitive data. Clients are often legally responsible for data protection, and cloud providers want to prevent hosting sensitive data to avoid liability claims after security incidents. The CloudFilter project explores novel methods for exercising control over sensitive data propagation across multiple cloud providers. The targeted outcome is a practical solution that allows clients and cloud providers to control the sensitivity of data that is transferred across their systems and to prevent user actions that would violate data dissemination policies. Our key idea is to provide application-level proxies that transparently monitor data propagation from clients to cloud providers and between cloud providers. These proxies employ a data labelling scheme inspired by decentralised information flow control (DIFC) models, in which security classes express the sensitivity of transfered data. When crossing domain boundaries, labels are attached to data automatically based on data dissemination policies. Proxies verify labels according to domain policies to detect and prevent unauthorised data propagation between cloud domain domains.

The Internet of Things has great potential to revolutionise the way in which we deploy networked devices, and to provide networking capability to every-day objects, making them 'smart objects'. Security should be at the core of these newly developed smart objects, but innovation is outstripping the development of security in this context. There is much emphasis on the positive side of this technology without considering the negative implications. It is not too challenging to think of many ways how the Internet of Things can be abused letting outsiders in through a digital ruse. This would include intruders gaining access to a lighting system, to remotely switch off the lights in a property, to assist in home burglary. Its also not too far of stretch to imagine an intruder turning on a cooker remotely, with the potential to cause a form of "digital arson" which we have never before experienced. Yes, it is amazing to be able to text your cooker so that dinner is ready when you get home. However, do we really want these features if it leaves us vulnerable to digital attack on our properties? Vast improvements need to be made in the state of the art of cyber defences in order to prepare and protect ourselves for the imminent innovations in digital technology. Novel and effective solutions in computer based security are imperative to research as current techniques may not prove effective in this new context. In order to create the next generation of cyber defence tools we must look to new sources of inspiration. One of these can be in the form of studying how this problem is solved in natural systems, in particular the defence and response mechanisms of the human immune system. Artificial immune systems (AIS) are one potential solution which may have significant impact on future cyber defence. They are designed to solve computational problems through studying natural mechanisms in immunology. Current research in AIS for computer security focuses purely on detection of anomalies, leaving the user to respond to the detected threat. Few of these systems actually produce any form of response as a result of detecting a potential intrusion. This is problematic in the Internet of Things as the responsibility would lie with the homeowner who is not a cyber security expert, leaving homes potentially vulnerable to digital intrusions. The novelty of this proposed research is to create a prototype responsive artificial immune system - RAIS, which can both detect intruders and produce appropriate responses in order to mitigate the problem of automatically responding intrusion detection systems. Persistent engagement with a cyber defence stakeholder will ensure that the prototype system is useful in cyber defence applications. Our approach to this is to perform a deep interdisciplinary study of the translation of detection to response within the human immune system by modelling immune responses. A mechanism in immunology termed the 'immunological synapse' will be studied form the basis of a model used to create a novel blueprint for the responsive artificial immune system. This will occur through constructing agent-based models of the natural system from which these necessary properties can be abstracted by looking at how two cell types, Dendritic Cells and T-helper cells interact to produce immune responses to pathogens. We will model this interaction using knowledge already amassed by the host group, and aim to extend the research through performing further experiments to refine these models. The discipline hop is to be hosted within an immunology lab, whose research aims to understand immune mechanisms of response in order to create immunotherapies for treating cancers, by turning the immune system against detected tumour cells. Understanding of natural immune responses is key for both the future developments of artificial immune systems and also in how to use the immune system therapeutically in the fight against cancer.

Abstracts are not currently available in GtR for all funded research. This is normally because the abstract was not required at the time of proposal submission, but may be because it included sensitive information such as personal details.

As the pressures of climate change becomes larger there is great interest in making highly efficient methods for generating and storing electrical energy. There is enormous interest in making batteries that exploit various lithium-based materials. These devices contain a solid anode and a solid cathode immersed in either a polymer, or solvent based electrolyte. Efficient batteries require that the thickness of both the cathode and anode materials are small in order both to reduce electrical resistance and to allow lithium to rapidly insert and de-insert itself from the solid electrode materials (by a process called intercalating). Furthermore they require that the surface area of the interface between the electrolyte and the anode (and cathode) should be made as large as possible in order to give sufficient lithium intercalation to allow practical levels of charging and discharging. As a result of these requirements batteries are currently designed with a nanostructured anode (and cathode) made either in a organised manner or by pressing grains together. Understanding how such nanostructures should be optimised in order to maximise energy efficiency is a major challenge. This is further complicated by the fact that the solid materials expand significantly (up to three times) when lithium is intercalated during charge and discharge of the battery creating both mechanical deformations and changes in the electrochemical behaviour of the surfaces. In order for such designs to be understood, and to be optimised, requires mathematical models to be developed and analysed that account for the critical properties of the nanostructure, the intercalation processes and the electrical properties of the materials. To replace existing high-efficiency high-cost silicon based solar cells there is significant interest in developing inexpensive polymer-based, and dye-sensitised, solar cells.Design of solar cells may seem unconnected from batteries but there is considerable similarity in the physical processes, mathematical models and geometry of the nanostructure of both these devices which provide the opportunity for a concerted theoretical program of research with significant technology transfer. Both types of solar cell that we consider here consist of two materials with different electrochemical properties separated by an interface (in the case of a dye-sensitised solar cell this interface is coated with a photo-absorbing dye monolayer). Efficient solar absorbtion requires that the interface between the two main materials is as large as possible while maintaining good electrical conduction. Nanostrucutred materials are being explored in order to meet these requirements. In order to optimise solar cell design models are required that account for solar absorbtion, the complex geometry of the nanostructure and charge transportation in the materials and across the interface.The purpose of this proposal is to develop novel mathematical techniques and models motivated by and closely aligned to practical developments in the complex nanostructure of these electrochemical systems. By analysing such models the most important mechanisms and features of the devices in determining their efficiency will be explored and identified.

Abstracts are not currently available in GtR for all funded research. This is normally because the abstract was not required at the time of proposal submission, but may be because it included sensitive information such as personal details.