Securing Scalable Distributed Services

随着计算机在家庭和社区中的普及，各种新的应用程序将会出现，这些应用程序将允许广泛分布的用户共享和操作不断演变的信息。在将部署应用程序的广域环境中，及时提供对此类信息的安全访问的问题是非常具有挑战性的。该项目将侧重于一种综合方法，该方法将探索这种要求苛刻的应用程序的可扩展性和安全性。为了提供交互响应时间来请求共享信息，将开发各种一致性模型和协议，它们将专门解决应用程序的时效性需求。为了保护应用程序的安全，将探索一种新的情景感知安全方法。在这种方法中，不仅可以根据发出请求的用户控制访问，还可以根据请求的安全相关上下文来控制访问。将开发基于该方法的访问控制模型以及相关的安全服务。在一个基于分布式对象的中间件系统中，将构建一个采用可伸缩性机制和相关服务的通用服务体系结构。将使用新的应用程序和工作负载来评估这些服务的有效性。

As computers become pervasive in the home and community, a variety of new applications will emerge which will allow widely distributed users to share and manipulate continuously evolving information. The problem of providing secure access to such information in a timely fashion is highly challenging in wide area environments where the applications will be deployed. The project will focus on an integrated approach that will explore the scalability and security of such demanding applications. The provide interactive response time to request for shared information, a variety of consistency models and protocols will be developed, and they will specially address the timeliness needs of applications. To secure the applications, a new context-aware security approach will be explored. In this approach, access can be controlled not only based on the user that makes the request but also on the security relevant context of the request. An access control model based on this approach as well as relevant security services will be developed. A general service architecture that employs the scalability mechanisms and the associated services will be built in a distributed object based middleware system. The effectiveness of these services will be evaluated using novel applications and workloads.