Collaborative Research: CT-T: Flexible, Decentralized Information-flow Control for Dynamic Environments

合作研究：CT-T：动态环境下灵活、分散的信息流控制

• 批准号: 0524036
• 负责人: Michael Hicks
• 金额: $ 27.96万
• 依托单位: University of Maryland, College Park
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-09-01 至 2009-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0524036&HistoricalAwards=false
• 关键词: Collaborative; Research; CT; Flexible; Decentralized

ABSTRACT0524036Hicks, Michael W.University of Maryland - College ParkNon-Lead Collaborative with 0524010, 0524132, 0524035Protecting confidential information in dynamic, distributed environments whose participants have heterogeneous trust relationships is an important and difficult challenge. An important problem is how to consistently enforce security constraints in a practical manner as policies and the systems themselves evolve over time. Without care, inconsistently-viewed updates to policy could allow a principal toperform actions granted by an old policy, or worse, could allow a principal to release information or perform actions authorized by neither an old nor a new policy, but rather an illegal combination of the two.The objective of the proposed research is to develop, implement, and evaluate security infrastructure for providing strong end-to-end security guarantees in dynamic environments where policy can change. The researchers will explore a novel synthesis of the state-of-the-art in security-typed programming languages for governing information flow; analysis for uncovering dependencies between principals, programs, and policies; and distributed protocols for coordinating policy updates. To motivate and validate the design decisions, this infrastructure will be incorporated into the programming language Cyclone, a type-safe variant of C, and used to build and evaluate distributed file system.

摘要0524036HICKS，MICHAEL W。 一个重要的问题是，随着政策和系统本身随着时间的推移而发展，如何以实用的方式持续执行安全限制。 在不小心的情况下，不一致的策略更新可能会允许由旧政策授予的主要副本，或更糟糕的是，可以允许校长发布信息或执行既不是旧政策或新政策授权的措施，而是两者的非法组合。拟议的研究的目标是开发，实施和评估安全性的策略，以更改安全性，以更改安全性，从而可以在不断的范围内进行安全性。 研究人员将探索用于管理信息流的安全性编程语言中最先进的综合；分析校长，计划和政策之间的依赖性；和分布式协议，用于协调策略更新。 为了激励和验证设计决策，该基础架构将被纳入C编程语言旋风（一种C的类型安全性）中，并用于构建和评估分布式文件系统。