CT-ISG: MLS-VM: Design and Implementation of a Next-Generation Information-Centric Target Platform for Trusted Internet Computing

如今，许多计算机程序既可以处理敏感信息，也可以处理非敏感信息。例如，网络浏览器用于网上银行，但也用于（有时甚至同时）购物和社交活动。这带来了相当真实的风险，秘密的银行信息可能会意外地“泄漏”到一个地方，它不应该。我们必须相信Web浏览器不会恶意地进行这样的信息泄漏，并且它不包含会无意中导致这样的泄漏的错误。该项目开发了一个新的可信Internet计算平台，其中每一条信息都有一个敏感标签。这使得底层系统，虚拟机，捕获不应该发生的信息流-即使应用程序支持程序（如浏览器）正在做错误的事情。 用户必须得到保证，这种不正当的流动，无论是故意的还是无意的，都将被阻止。预计该项目将导致可信软件开发和部署方式的重大改进，因为它允许将应用程序的安全问题与业务逻辑分开。由此产生的平台将能够托管操纵机密信息的应用程序，即使这些应用程序本身是不可信的。最终结果将大大提高基本软件基础设施的安全性和可靠性。

Many computer programs today manipulate both sensitive and non-sensitive information. For example, a web browser is used for Internet banking but is also used (sometimes even simultaneously) for shopping and for social activities. This brings with it the quite real risk that secret banking information might accidentally 'leak' to a place that it shouldn't. We have to trust the web browser that it won't maliciously perpetrate such an information leak, and that it doesn't contain an error that would unintentionally enable such a leak.This project develops a new platform for Trusted Internet Computing in which every piece of information has a sensitivity label attached to it. This enables the underlying system, a virtual machine, to catch information flows that should not be happening - even if the application support program (such as a browser) is doing the wrong thing. The user must have assurance that such improper flows, whether intentional or not, will be prevented.The project is expected to lead to significant improvements in the way that trusted software is developed and deployed, because it allows separation of the security concerns of an application from the business logic. The resulting platform will be able to host applications that manipulate classified information, even though the applications themselves are untrusted. The end result will be greatly improved security and reliability of essential software infrastructure.