CT-ISG: Trusted Passages: Managing Distributed Trust to Meet the Needs of Emerging Applications

从政府和商业环境中使用的操作信息系统到那些运行日常电子商务网络服务的关键应用程序依赖于分布式计算系统以可信的方式产生、处理和传播信息。对这类应用程序和底层基础设施的攻击可能会严重限制它们满足最终用户需求的能力。当今大规模分布式系统中应用程序、技术和平台的固有复杂性使得创建能够在攻击存在时继续以可信方式运行的服务具有极大的挑战性。在本研究项目中，通过将现代系统虚拟化技术与新的运行时信任监控和评估方法相结合，提出了一种新的方法来满足应用程序的信任需求。该方法动态地创建和维护称为可信通道的抽象，该抽象封装了应用程序所需的处理、存储和通信资源。这样的资源存在于分布式且可能不可信的执行平台上。监视应用程序执行的信任控制器在运行时确定与受信任通道相关联的某些资源何时可能已受到威胁，需要由其他资源替换。可信通道利用的新功能将很快成为大多数(如果不是全部)计算和网络平台的一部分。因此，即使在互联网不安全的情况下，我们的目标也是不断评估应用程序使用的分布式计算平台，并基于这些信息为关键应用程序提供可信服务。这项研究促进了安全和系统研究人员之间的密切合作，并加强了与多个行业研究合作伙伴的持续互动。

AbstractPI: Ahamad; CoPIs: Lee and SchwanCritical applications that range from operational information systems used ingovernment and commercial settings to those that run daily e-commerceweb services rely on distributed computing systems to produce, process, and disseminate information in a trustworthy fashion. Attacks on such applications and the underlying infrastructure can severely limittheir ability to meet end-user needs. The inherent complexity of applications,technologies, and platforms in today's large scale distributed systems makes it extremely challenging to create services that can continue to behave ina trustworthy manner in the presence of attacks. In this research project, a new approach is proposed to meet the trust needs of applications by integrating modern system virtualization techniques with new methods for runtime trust monitoring and assessment. This approach dynamically creates and maintains an abstraction called a trusted passage that encapsulates processing, storage and communication resources required by an application. Such resources exist across distributed and potentially untrusted execution platforms. Trust controllers, which monitor application execution, determine at runtime when some resources associated with a trusted passages may have become compromised and need to be replaced by others. Trusted passages leverage new capabilities soon to be part of most, if not all, computational and network platforms. Thus, even with an insecure Internet, our goal is to continually assess the distributed computational platforms being used by applications, and based on that information, provide trustedservices to critical applications. This research fosters close collaboration among security and systems researchers and strengthens ongoing interactions with multiple industry research partners.