CAREER: Practical Language-Based End-to-End Security

点击翻译按钮获取中文摘要

Increasingly, confidential information is placed on network-accessiblecomputers by organizations and individuals, yet neither the currentpractice nor theories of computer security are adequate to ensure thatthis information remains confidential. The lack of sound mechanismsfor protecting confidential information, especially in the presence ofmalicious code or hosts, creates serious privacy, liability, and evennational security concerns.This research explores new security mechanisms that provide stronger,end-to-end assurance that data remains confidential. The focus is onthree important areas where existing models are inadequate and existingenforcement methods are impractical. First, confidentiality mustbe protected even in systems that include both mutually distrustingprincipals and untrusted, possibly malicious hosts. Second, concurrentand distributed systems create new challenges for information flowcontrol. Third, new techniques are needed for verifying that binarycode, including legacy code, protects confidential information.The goal of this work is fast, practical, end-to-end assurance ofconfidentiality for decentralized systems with mutual distrust. Thiskind of assurance promises to significantly strengthen the security ofthe emerging computing infrastructure.