Collaborative Research: CT-T: Flexible, Decentralized Information-flow Control for Dynamic Environments

合作研究：CT-T：动态环境下灵活、分散的信息流控制

• 批准号: 0524035
• 负责人: Stephan Zdancewic
• 金额: $ 30万
• 依托单位: University of Pennsylvania
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-09-01 至 2009-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0524035&HistoricalAwards=false
• 关键词: Collaborative; Research; CT; Flexible; Decentralized

ABSTRACT0524035Zdancewic, StephanUniversity of PennsylvaniaNon-Lead Collaborative with 0524010, 0524132, 0524036Protecting confidential information in dynamic, distributed environments whose participants have heterogeneous trust relationships is an important and difficult challenge. An important problem is how to consistently enforce security constraints in a practical manner as policies and the systems themselves evolve over time. Without care, inconsistently-viewed updates to policy could allow a principal toperform actions granted by an old policy, or worse, could allow a principal to release information or perform actions authorized by neither an old nor a new policy, but rather an illegal combination of the two.The objective of the proposed research is to develop, implement, and evaluate security infrastructure for providing strong end-to-end security guarantees in dynamic environments where policy can change. The researchers will explore a novel synthesis of the state-of-the-art in security-typed programming languages for governing information flow; analysis for uncovering dependencies between principals, programs, and policies; and distributed protocols for coordinating policy updates. To motivate and validate the design decisions, this infrastructure will be incorporated into the programming language Cyclone, a type-safe variant of C, and used to build and evaluate distributed file system.

Zdancewic，StephanoPennsylvania大学非领导合作与0524010，0524132，0524036在动态的分布式环境中保护机密信息是一个重要而困难的挑战，因为这些环境的参与者具有不同的信任关系。 一个重要的问题是，随着政策和系统本身的不断发展，如何以切实可行的方式始终如一地实施安全约束。 如果不小心，对策略的不一致查看的更新可能允许主体执行旧策略授予的操作，或者更糟，可能允许主体发布信息或执行既不是旧策略也不是新策略授权的操作，而是两者的非法组合。并评估安全基础设施，以便在策略可能发生变化的动态环境中提供强大的端到端安全保证。 研究人员将探索一种新的安全类型编程语言的最新综合，用于管理信息流;分析发现主体，程序和策略之间的依赖关系;以及用于协调策略更新的分布式协议。 为了激励和验证设计决策，该基础设施将被纳入编程语言Cyclone，C的类型安全变体，并用于构建和评估分布式文件系统。