CAREER: Security and Resource Management in Type-safe Language Environments

职业：类型安全语言环境中的安全和资源管理

• 批准号: 9985332
• 负责人: Dan Wallach
• 金额: $ 20万
• 依托单位: William Marsh Rice University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2000
• 资助国家: 美国
• 起止时间: 2000-04-01 至 2004-03-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=9985332&HistoricalAwards=false
• 关键词: CAREER; Security; Resource; Management; Type

CCR-9985332Dan WallachRice Univ.Abstract Type-safe language runtime systems are being used as mechanisms for evaluating untrusted computations within a wide range of applications from Web browsers and proxy servers to databases and agent systems. Most current language-based systems have insufficient resource controls for aggregate use of memory, CPU, network bandwidth, and soforth. This research aims to implement resource management support within language-based systems, allowing for widespread use of a promising new technology. This research will design and implement language runtime mechanisms within a commercial Java system to accurately and efficiently account for memory and CPU use, and to allow for safe termination of a computation. These mechanisms will besupported by rigorous mathematical models allowing their security and efficiency to be formally studied, and their applicability to extend to a wide class of language-based systems. Educational activities at Rice University will be integrated with this research, building on topics across the traditional computer science curriculum. Course developments will teach techniques for building secure systems, emphasizing both formal methods and practical software engineering techniques with an understanding of how hackers work in practice. Additionally, community outreach will work to dispel common misconceptions about computer security through the popular press and various speaking engagements.

类型安全的语言运行时系统被广泛用作评估不可信计算的机制，从Web浏览器和代理服务器到数据库和代理系统。大多数当前基于语言的系统对内存、CPU、网络带宽等的聚合使用没有足够的资源控制。这项研究的目的是在基于语言的系统中实现资源管理支持，从而允许广泛使用一项有前途的新技术。本研究将在商业Java系统中设计和实现语言运行时机制，以准确有效地计算内存和CPU的使用，并允许安全终止计算。这些机制将得到严格的数学模型的支持，允许对其安全性和效率进行正式研究，并将其适用性扩展到广泛的基于语言的系统。莱斯大学的教育活动将与这项研究相结合，建立在传统计算机科学课程的主题上。课程开发将教授构建安全系统的技术，强调正式方法和实用的软件工程技术，并了解黑客在实践中的工作方式。此外，社区外展将通过大众媒体和各种演讲活动消除对计算机安全的普遍误解。