CT-ISG: MLS-VM: Design and Implementation of a Next-Generation Information-Centric Target Platform for Trusted Internet Computing

CT-ISG：MLS-VM：用于可信互联网计算的下一代以信息为中心的目标平台的设计和实现

• 批准号: 0627747
• 负责人: Michael Franz
• 金额: --
• 依托单位: University of California-Irvine
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2006
• 资助国家: 美国
• 起止时间: 2006-09-01 至 2010-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0627747&HistoricalAwards=false
• 关键词: CT; ISG; MLS; VM; Design

Many computer programs today manipulate both sensitive and non-sensitive information. For example, a web browser is used for Internet banking but is also used (sometimes even simultaneously) for shopping and for social activities. This brings with it the quite real risk that secret banking information might accidentally 'leak' to a place that it shouldn't. We have to trust the web browser that it won't maliciously perpetrate such an information leak, and that it doesn't contain an error that would unintentionally enable such a leak.This project develops a new platform for Trusted Internet Computing in which every piece of information has a sensitivity label attached to it. This enables the underlying system, a virtual machine, to catch information flows that should not be happening - even if the application support program (such as a browser) is doing the wrong thing. The user must have assurance that such improper flows, whether intentional or not, will be prevented.The project is expected to lead to significant improvements in the way that trusted software is developed and deployed, because it allows separation of the security concerns of an application from the business logic. The resulting platform will be able to host applications that manipulate classified information, even though the applications themselves are untrusted. The end result will be greatly improved security and reliability of essential software infrastructure.

如今，许多计算机程序都操纵敏感和不敏感的信息。例如，网络浏览器用于互联网银行业务，但（有时甚至同时）用于购物和社交活动。这给它带来了非常真正的风险，即秘密银行信息可能会意外地“泄漏”到一个不应该的地方。我们必须相信Web浏览器，它不会恶意造成这样的信息泄漏，并且它不会包含无意识地造成这样的泄漏的错误。此项目为可信的Internet计算开发了一个新的平台，其中每个信息都具有附在其上的灵敏度标签。这使底层系统，一种虚拟机能够捕获不应该发生的信息流 - 即使应用程序支持程序（例如浏览器）正在做错事。 用户必须保证，无论是否有意，这种不当流程都将被防止。预计该项目将导致可信赖的软件的开发和部署方式可显着改善，因为它允许将应用程序的安全问题与业务逻辑分开。最终的平台将能够托管操纵分类信息的应用程序，即使应用程序本身是不信任的。最终结果将大大提高基本软件基础架构的安全性和可靠性。