CAREER: Group-Centric Secure Information Sharing - Models, Properties, and Implementation

职业：以群体为中心的安全信息共享 - 模型、属性和实施

• 批准号: 1553696
• 负责人: RAM KRISHNAN
• 金额: $ 54.44万
• 依托单位: University of Texas at San Antonio
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-07-01 至 2023-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1553696&HistoricalAwards=false
• 关键词: CAREER; Group; Centric; Secure; Information

One of the oldest and most challenging problems in cyber security is to enable secure information sharing (SIS) (i.e., maintaining some control over information even after it has been shared.) For example, a product manufacturer may need to share customer account information with a company that ships the products and bills the customers. The manufacturer cannot allow its partner to then misuse those customer records by direct marketing or selling customer records. This project focuses on the policy challenge of specifying, analyzing and enforcing SIS policies. The project is developing intuitive, usable, and mathematically sound models that can be used by organizations to specify and enforce SIS policies.This project focuses on specifying, analyzing and enforcing group-centric secure information sharing (g-SIS) policies. The researchers are developing a theory of multiple, connected groups based on relationships such as subordination, conditional membership and mutual exclusion, with broad, real-world application. The approach separates policy layer specifications from enforcement layer specifications, and develops varying levels of formal consistency metrics between the two with respect to authorization decisions. The research team is working with organizations to prototype and use the information sharing platform in ongoing community cyber incident information sharing efforts.

网络安全中最古老，最具挑战性的问题之一是启用安全的信息共享（SIS）（即，即使在共享信息之后，也可以维持对信息的某些控制权。 制造商不能允许其合作伙伴通过直接营销或出售客户记录滥用这些客户记录。该项目着重于指定，分析和执行SIS政策的政策挑战。该项目正在开发直观，可用和数学上合理的模型，该模型可以被组织使用来指定和执行SIS策略。本项目的重点是指定，分析和执行以组为中心的以组为中心的安全信息共享（G-SIS）政策。研究人员正在基于从属关系，有条件的成员身份和相互排斥等关系的多个相互联系的群体的理论，并具有广泛的现实应用。该方法将策略层规范与执行层规格区分开，并在两者之间在授权决策方面发展了不同级别的正式一致性指标。 研究团队正在与组织合作，以原型并使用信息共享平台进行正在进行的社区网络事件信息共享工作。