CT-ER : Runtime Techniques for protecting confidential data in large scale software

CT-ER：保护大型软件中机密数据的运行时技术

• 批准号: 0716584
• 负责人: Venkat Venkatakrishnan
• 金额: --
• 依托单位: University of Illinois at Chicago
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-08-01 至 2010-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0716584&HistoricalAwards=false
• 关键词: CT; ER; Runtime; Techniques; protecting

With the increasing amount of confidential information being handledby computer software, ensuring privacy of personal information isbecoming a great concern. To address this concern, this projectinvestigates mechanisms that trackthe use of sensitive data handled by software programs with the goal ofpreventing unauthorized disclosure.The technical focus is on the use of runtime mechanisms that track theuse of sensitive data. There are three thrust areas investigated inthis proposal (a) mechanisms for process based separation andruntime checking for enforcing confidentiality policies(b) techniques for erasing sensitive data from programsafter their intended use and (c) techniques for tracking implicitinformation flows. The project uses novel ideas that build on the PI'sprior work in language based techniques for addressingfundamental research questions in these thrust areas.To maximize impact, this project will also implement toolsthat will apply these techniques to large scale softwareapplications. These tools will enable programmers and end usersto retrofit programs in order to safeguard theirconfidential data. These tools will be distributed using theWeb for the widest possible dissemination and further enhancement.With regards to education, this project aims to train both graduate andundergraduate students to perform research in the the application oflanguage based methods for computer security and privacy.

随着计算机软件处理的机密信息量不断增加，确保个人信息的隐私性已成为人们关注的焦点。 为了解决这个问题，该项目研究了跟踪软件程序处理的敏感数据使用情况的机制，目的是防止未经授权的泄露。技术重点是使用跟踪敏感数据使用的运行时机制。该提案研究了三个重点领域（a）基于流程的分离和运行时检查机制，以执行机密性策略（b）在程序预期使用后从程序中删除敏感数据的技术以及（c）跟踪隐式信息流的技术。该项目使用基于 PI 先前工作的基于语言的技术的新颖想法来解决这些重点领域的基础研究问题。为了最大限度地发挥影响，该项目还将实现将这些技术应用于大规模软件应用程序的工具。这些工具将使程序员和最终用户能够改进程序以保护他们的机密数据。 这些工具将通过网络进行分发，以尽可能广泛地传播和进一步增强。在教育方面，该项目旨在培训研究生和本科生，以在基于语言的计算机安全和隐私方法的应用方面进行研究。