A Language-Based Approach to Secure Quorum Replication
A Language-Based Approach to Secure Quorum Replication
复制标题
一种基于语言的保护仲裁复制的方法
DOI：
--
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
A. Myers
中科院分区：
文献类型：
--
作者：
Lantian Zheng;A. Myers
仲裁复制是构建分布式系统的一项重要技术，因为它可以同时提高计算和存储的完整性和可用性。信息流控制是一种众所周知的加强信息机密性和完整性的方法。本文证明，可以集成这两种技术来同时强制执行所有三个主要安全属性：机密性、完整性和可用性。它提供了一种具有显式语言结构的安全类型语言，用于支持安全仲裁复制。语言的类型系统执行的依赖性分析提供了一种正式验证复杂复制方案的端到端安全保证的方法。我们还贡献了一种新的多级时间戳机制，用于同步代码和数据副本，同时控制此类同步引入的先前忽略的侧通道。
Quorum replication is an important technique for building distributed systems because it can simultaneously improve both the integrity and availability of computation and storage. Information flow control is a well-known method for enforcing the confidentiality and integrity of information. This paper demonstrates that these two techniques can be integrated to simultaneously enforce all three major security properties: confidentiality, integrity and availability. It presents a security-typed language with explicit language constructs for supporting secure quorum replication. The dependency analysis performed by the type system of the language provides a way to formally verify the end-to-end security assurance of complex replication schemes. We also contribute a new multilevel timestamp mechanism for synchronizing code and data replicas while controlling previously ignored side channels introduced by such synchronization.