ITR/SI: A Flexible Framework for Secure Information Sharing Among Collaborating Organizations

ITR/SI：协作组织之间安全信息共享的灵活框架

• 批准号: 0113515
• 负责人: Sushil Jajodia
• 金额: $ 36万
• 依托单位: George Mason University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2001
• 资助国家: 美国
• 起止时间: 2001-09-01 至 2005-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0113515&HistoricalAwards=false
• 关键词: ITR; SI; Flexible; Framework; Secure

Proposal No: 0113515ITR/SY: A Flexible Framework for Secure Information Sharing Among Collaborating OrganizationsPI: Jajodia SushilThis proposal seeks to develop a exible framework for secure information sharing among collaborating organizations. The approach will be to extend the Flexible Authorization Framework (FAF) designed by the PI and his colleagues. FAF is based on an authorization specication language that has rule based syntax and sound, non-monotonic logic based semantics. The rst goal of this proposal is to enhance FAF to include information ow controls, provisional authorizations, delegation of authority, and a rather broad sense of revocation capabilities of granted permissions. The second undertaking is to investigate ecient implementation of the resulting framework that is based on the best practices of the security community. The third goal of this proposal is to investigate the properties of basic constructs that are used to compose security policies.The main deliverables of this proposal are a reference architecture, mathematics and algorithms for security specications of information access and ow, their ecient implementation techniques, and an an algebra for policy compositions.

提案编号：0113515 ITR/SY：一个灵活的框架，用于安全的信息共享之间的合作企业PI：Jajodia Sushil这个建议旨在开发一个灵活的框架，安全的信息共享之间的合作组织。该方法将扩展PI及其同事设计的灵活授权框架（FAF）。FAF基于一种授权规范语言，该语言具有基于规则的语法和基于声音、非单调逻辑的语义。该提案的第一个目标是增强FAF，以包括信息流控制、临时授权、授权委托以及相当广泛意义上的已授予许可的撤销能力。第二项任务是调查基于安全界最佳做法的最终框架的执行情况。本提案的第三个目标是研究用于组成安全策略的基本结构的属性，本提案的主要交付成果是一个参考体系结构，信息访问和ow的安全规范的数学和算法，它们的ecient实现技术，以及策略组成的代数。