EAGER: Accountability Through Architecture for Decentralized Systems

EAGER：通过去中心化系统架构承担责任

• 批准号: 1449159
• 负责人: Richard Taylor
• 金额: $ 20万
• 依托单位: University of California-Irvine
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-09-01 至 2016-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1449159&HistoricalAwards=false
• 关键词: EAGER; Accountability; Through; Architecture; Decentralized

Advancing the ability to create trustworthy computing systems demands fundamental advances in many technologies and at many levels of abstraction. Creating trustworthy applications requires more than a set of excellent building blocks, however. It demands an architectural understanding; one that shows a viable approach to utilizing many contributions in mutually consistent and supportive ways. This project springs from a focus on achieving security through innovative software architecture, wherein novel combinations of technologies are applied and the essential mechanisms of security and accountability are built in. In particular, the security concerns of prevent, detect, isolate, mitigate, and blame demand an architectural solution wherein systemic accountability is an architectural consequence, rather than an option.To this end the proposal offers a novel alternative architectural style, COAST, for constructing secure, large-scale, decentralized systems, coupled with a focus on capability accounting. A capability is an unforgeable reference whose possession confers both authority and rights to a principal. Capability accounting is the practice of producing and maintaining a record or statement of the generation, transfer, or use of capability relating to a particular period or purpose. The approach facilitates the fine-grained use of capability accounting to prevent security problems, isolate them, mitigate consequences of problems, and, if necessary, assign blame for use in subsequent actions. Target applications are typified by SOAs (Service Oriented Architectures), such as those found in e-commerce, where there are multiple interacting parties but no single overarching authority. Our approach is inspired and informed by the daily use of broad accounting principles in other industries, notably Hazard Analysis and Critical Control Points (HACCP), a systematic preventive approach to hazards in production processes, and the generally accepted accounting principles (GAAP) of finance and business. Our immediate focus is assessing the viability of this approach in a notional Internet-of-Things application, where we rely on careful measurement and engineering analysis to guide future larger-scale projects.

提高创建值得信赖的计算系统的能力需要许多技术和许多抽象的基本进步。但是，创建值得信赖的应用程序不仅需要一组出色的构建块。它需要建筑理解；一种显示一种可行的方法，可以以相互一致和支持的方式利用许多贡献。该项目源于通过创新的软件体系结构的重点来实现安全性，其中应用了技术的新型组合，并内置了安全性和问责制的基本机制。特别是，预防，检测，孤立，缓解和责备的安全性问题与此架构相比，与此构造的构建范围相比，您的最终架构是一种建筑构建，而不是构造的构造，这是一种型号的构造，这是一个型号的构造效果。大规模的分散系统，再加上关注能力会计。能力是一个难以忍受的参考，其拥有权同时赋予了委托人的权威和权利。能力会计是制作和维护与特定时期或目的有关的能力的发电，转移或使用的记录或陈述的做法。该方法促进了对能力会计的细粒度使用，以防止安全问题，隔离它们，减轻问题的后果，并在必要时归咎于后续行动。目标应用程序的特征是SOA（面向服务的架构），例如在电子商务中发现的，那里有多个交互当事方，但没有单一的总体权限。 我们的方法受到其他行业中的广泛会计原则的启发和告知，尤其是危害分析和关键控制点（HACCP），一种系统的预防性预防性预防生产过程中的危害方法，以及财务和业务的普遍接受会计原则（GAAP）。 我们的直接重点是在概念上的应用程序应用程序中评估这种方法的生存能力，在该应用程序中，我们依靠仔细的测量和工程分析来指导未来的大规模项目。