CAREER: Programmable Security for Distributed Systems and Databases

点击翻译按钮获取中文摘要

John HaleUniversity of TulsaCCR-9984774ABSTRACT Systematic attacks to military, government and corporate networks underscorethe fundamental importance of computer security. Unfortunately, currentapproaches to security often yield ad hoc patchworks of inconsistent policiesand incompatible mechanisms. The problem is two-fold: Techniques and tools arelimited, and educational programs are sparse. The research activities embed configurable security services withinprogramming languages for developing distributed applications. Denotationalsemantics for these languages map high-level access control structures into aticket-based model that captures heterogeneous security policies and supportsthe formal verification of secure behavior. Specialized algorithms implementsecurity proofs for applications at compile-time and runtime. A secure information enclave, a proof-of-concept application, is builtaround a glue language with programmable security policy coordination services.Mediators gather metadata from remote sites, engaging cooperative policymanagement methods to negotiate secure interoperability. Static and dynamicanalyses guarantee global policy consistency for the enclave. The educational activities have three major thrusts: The development of aCenter of Excellence for Information Assurance Education, the expansion of theTulsa Undergraduate Research Challenge --a nationally recognized program ofacademics, research and service designed for computer science majors, and thesystematic incorporation of minorities, especially Native Americans (the PI is anative Cherokee), in computer science and engineering programs in the state ofOklahoma.