ITR: Deployment-Oriented Security and Content Protection

计算机安全系统面临的困难之一是让用户和管理员采用它们。该项目研究了一种部署安全服务的新方法，称为面向部署的安全。第一个问题是如何以病毒式的方式部署安全服务。这个想法是，一旦一小部分用户采用了安全系统，他们就会逐渐让他们的朋友采用该系统，从而使该服务在人群中传播。该项目研究了这种类似模因的策略如何应用于各种安全服务，如安全电子邮件、匿名机制、电子投票、安全文件系统、电子现金等。促进安全系统部署的另一种方法是动态部署所需的基础设施。例如，可以动态部署匿名服务器或公平交换服务来启用该服务吗？如何识别受信任的主机以部署服务，以及如何撤销损坏或行为不端的主机？本项目研究的第三个主题是如何在共享信息的环境中部署保护机制。该项目将使用新的加密工具为广播数据开发有效的密钥管理技术。

One of the difficulties facing computer security systems is getting users and administrators to adopt them. The project studies a new approach to deploying security services called Deployment-OrientedSecurity. The first question is how to deploy security services in a viral-like fashion. The idea is that once a small set of users adopt a security system, they gradually get their friends to adopt thesystem and as a result the service propagates through the population. The project studies how this meme-like strategy applies to various security services such as secure e-mail, anonymity mechanisms,electronic voting, secure file systems, e-cash, etc. Another approach to promoting the deployment of security systems is to deploy the required infrastructure on the fly. For example, can one deploy ananonymizing server or a fair-exchange service on the fly to enable that service? How does one identify trusted hosts to deploy the service and how does one revoke corrupt or misbehaving hosts? Thethird topic studied in this project is how to deploy protection mechanisms in environments where information is being shared. The project will use new cryptographic tools to develop efficient key management techniques for broadcast data.