Securing Scalable Distributed Services

随着计算机在家庭和社区中的普及，将出现各种新的应用程序，这些应用程序将允许分布广泛的用户共享和操纵不断发展的信息。 在应用程序将部署的广域环境中，及时提供对此类信息的安全访问的问题极具挑战性。 该项目将侧重于一个综合的方法，将探索这种要求苛刻的应用程序的可扩展性和安全性。 为了提供对共享信息请求的交互式响应时间，将开发各种一致性模型和协议，它们将专门解决应用程序的及时性需求。 为了保护应用程序，将探索一种新的上下文感知安全方法。 在这种方法中，不仅可以基于发出请求的用户，而且可以基于请求的安全相关上下文来控制访问。 将开发基于这种方法的访问控制模型以及相关的安全服务。 一个通用的服务体系结构，采用的可扩展性机制和相关的服务将建立在一个基于分布式对象的中间件系统。 这些服务的有效性将使用新的应用程序和工作负载进行评估。

As computers become pervasive in the home and community, a variety of new applications will emerge which will allow widely distributed users to share and manipulate continuously evolving information. The problem of providing secure access to such information in a timely fashion is highly challenging in wide area environments where the applications will be deployed. The project will focus on an integrated approach that will explore the scalability and security of such demanding applications. The provide interactive response time to request for shared information, a variety of consistency models and protocols will be developed, and they will specially address the timeliness needs of applications. To secure the applications, a new context-aware security approach will be explored. In this approach, access can be controlled not only based on the user that makes the request but also on the security relevant context of the request. An access control model based on this approach as well as relevant security services will be developed. A general service architecture that employs the scalability mechanisms and the associated services will be built in a distributed object based middleware system. The effectiveness of these services will be evaluated using novel applications and workloads.