SGER: Enabling Electronic Self-Defense with Dynamic Identities

NSF 0549087SGER：使用动态身份启用电子自卫PI：道格拉斯·塞恩在许多操作系统中，只有高特权用户(超级用户)才能创建新用户。此限制防止普通用户保护自己免受不可信应用程序的影响，因为用户很难创建一个新的、更受限制的环境来运行可疑应用程序。这也给软件设计人员带来了一个令人不快的选择：他们要么以普通用户的身份运行并将自己置于风险之中，要么以超级用户的身份运行并将整个系统置于风险之中。这个问题几十年来一直困扰着技术社区，现在影响着网络和网格计算中的公众。动态身份的概念解决了这个问题。在具有动态身份的操作系统中，任何用户都可以在运行时创建子身份，而无需与管理员交互。单个用户可以通过使用动态身份运行不可信的程序来执行自卫。动态身份还简化了分布式系统的管理：可以根据本地或全球准入策略动态创建帐户。这项研究将通过实现这一概念并使用该实现来探索现有开源操作系统中的权衡来评估这一概念。初步工作将调查应用程序和操作系统之间的交互。这项工作的结果将是描述和评估动态身份的实施、应用和部署的体验报告

NSF 0549087SGER: Enabling Electronic Self-Defense with Dynamic IdentitiesPI: Douglas Thain In many operating systems, only a highly privileged user (a "super user") is allowed to create new users. This limitation prevents ordinary users from protecting themselves from untrustworthy applications, because it is difficult for a user to create a new, more restricted environment in which to run questionable applications. It also presents software designers with an uncomfortable choice: they may either run as an ordinary user and put themselves at risk, or they may run as the super-user and put the entire system at risk. This problem has afflicted the technical community for decades and now affects the public on the web and in grid computing. The concept of dynamic identities attacks this problem. In an operating system with dynamic identities, any user may create sub-identities at runtime without interacting with an administrator. Single users may perform self-defense by using dynamic identities to run untrusted programs. Dynamic identities also simplify the administration of distributed systems: accounts may be created on the fly according to local or global admission policies. This research will evaluate this concept by implementing it and using the implementation to explore the tradeoffs within an existing open source operating system. Preliminary work will investigate interactions between applications and the operating system. The results of this work will be experience reports describing and evaluating the implementation, applications, and deployment of dynamic identitie