ITR: Mechanisms for Securing Emerging Applications

随着计算机在家庭和社区的普及，新的应用将会出现，通过自动化或协助各种人类活动，使日常生活变得更加容易。这样的应用程序将是信息丰富的，它们将创建和操作有关其用户活动以及他们生活和工作的环境的敏感信息。在佐治亚理工学院，已经建立了一个信息丰富的“感知之家”来探索许多这样的应用。显然，如果要成功部署这些应用程序，确保它们的安全是很重要的。该项目将开展一系列研究活动，以确保未来的应用。其中包括针对此类应用程序的新安全策略，以及直观灵活的访问控制模型。还将研究各种自动用户识别技术，以验证请求的来源，而不需要用户进行繁重的参与。将开发从外部来源访问的信息的完整性的新概念。授权、身份验证和完整性机制将用于为新兴应用程序构建安全服务。将探讨使用形式化模型来研究新的安全策略和访问控制模型的重要属性。

As computers become pervasive in the home and community, new applicationswill emerge that will make daily living easier by automating or assisting in a variety of human activities. Suchapplications will be information rich and they will create and manipulatesensitive information about the activities of their users, and the environment in which they live and work. At the Georgia Institute of Technology, an information rich "Aware Home'' hasbeen built to explore many such applications. Clearly, it is importantthat such applications be secured if they are to be deployed successfully.This project will undertake a range of research activities tosecure future applications. These include new security policies for such applications, and intuitive and flexible access control models. A variety of automatic user identification techniques will also be investigated to authenticate sourcesof requests without requiring burdensome participation from the users making the requests. New notions of integrity for information accessed from outside sources will be developed. The authorization, authentication and integrity mechanisms will be used to build security servicesfor emerging applications. The use of formal models will be explored to study important properties of the new security policies and access control models.