CAREER: Security and Resource Management in Type-safe Language Environments

摘要类型安全语言运行时系统被用作评估不可信计算的机制，这些计算在从Web浏览器和代理服务器到数据库和代理系统的广泛应用中。 当前大多数基于语言的系统对于内存、CPU、网络带宽等的总体使用没有足够的资源控制。 这项研究的目的是实现基于语言的系统内的资源管理支持，允许广泛使用的一个有前途的新技术。 这项研究将设计和实现语言运行时机制在商业Java系统中，以准确和有效地占内存和CPU的使用，并允许安全终止计算。 这些机制将besupported严格的数学模型，使其安全性和效率进行正式研究，其适用性扩展到广泛的一类基于语言的系统。 莱斯大学的教育活动将与这项研究相结合，以传统计算机科学课程的主题为基础。 课程开发将教授构建安全系统的技术，强调正式方法和实用的软件工程技术，并了解黑客在实践中如何工作。 此外，社区外展将通过大众媒体和各种演讲活动，努力消除对计算机安全的常见误解。

CCR-9985332Dan WallachRice Univ.Abstract Type-safe language runtime systems are being used as mechanisms for evaluating untrusted computations within a wide range of applications from Web browsers and proxy servers to databases and agent systems. Most current language-based systems have insufficient resource controls for aggregate use of memory, CPU, network bandwidth, and soforth. This research aims to implement resource management support within language-based systems, allowing for widespread use of a promising new technology. This research will design and implement language runtime mechanisms within a commercial Java system to accurately and efficiently account for memory and CPU use, and to allow for safe termination of a computation. These mechanisms will besupported by rigorous mathematical models allowing their security and efficiency to be formally studied, and their applicability to extend to a wide class of language-based systems. Educational activities at Rice University will be integrated with this research, building on topics across the traditional computer science curriculum. Course developments will teach techniques for building secure systems, emphasizing both formal methods and practical software engineering techniques with an understanding of how hackers work in practice. Additionally, community outreach will work to dispel common misconceptions about computer security through the popular press and various speaking engagements.