Poly/sup 2/ paradigm: a secure network service architecture
Poly/sup 2/ paradigm: a secure network service architecture
复制标题
Poly/sup 2/范式：安全网络服务架构
DOI：
10.1109/csac.2003.1254339
复制
发表时间：
2003
期刊：
影响因子：
--
通讯作者：
Scott Yost
中科院分区：
文献类型：
--
作者：
E. Bryant;James P. Early;R. Gopalakrishna;G. Roth;E. Spafford;Keith Watson;P. Williams;Scott Yost
通用操作系统为用户和攻击者提供丰富的计算环境。硬件的成本下降和软件的安全性问题不断增长，这需要对网络服务体系结构中的许多假设进行重新验证。在保留可用性和灵活性的同时执行声音设计原则是实践安全的关键。 poly/ sup 2/是一种从商品硬件和软件中构建网络服务的硬化框架的方法。 Poly/ SUP 2/在诸如心理可接受性和直接可用性之类的目标的驱动下，在众所周知的安全设计原则的指导下，诸如最不常见的机制和机制的经济性，为网络服务提供了安全的平台。它还可以作为与安全有关的研究领域的测试台，例如入侵检测，取证和高可用性。本文讨论了Poly/SUP 2/的总体设计和理念，提出了初步实施，并概述了未来的工作。
General-purpose operating systems provide a rich computing environment both to the user and the attacker. The declining cost of hardware and the growing security concerns of software necessitate a revalidation of the many assumptions made in network service architectures. Enforcing sound design principles while retaining usability and flexibility is key to practical security. Poly/sup 2/ is an approach to build a hardened framework for network services from commodity hardware and software. Guided by well-known security design principles such as least common mechanism and economy of mechanism, and driven by goals such as psychological acceptability and immediate usability, Poly/sup 2/ provides a secure platform for network services. It also serves as a testbed for several security-related research areas such as intrusion detection, forensics, and high availability. This paper discusses the overall design and philosophy of Poly/sup 2/, presents an initial implementation, and outlines future work.