Safe Computing Workshop: Introspective Hardware Architectures for Information Assurance

推荐编号：0653951PI：斯蒂芬妮·福雷斯特研究所：新墨西哥大学标题：安全计算研讨会：内省硬件架构或信息保障摘要新墨西哥大学将于11月29日至12月1日主办一个关于实现安全计算平台的研讨会。我们迫切需要一台安全的主机，因为对我国计算机和网络系统的大多数攻击都利用了终端的弱点，即用户运行应用程序的主机。这次研讨会将汇集学术界、工业界(硬件和软件界)和美国政府机构的专家，为开发安全主机准备一份议程，包括硬件基础、操作系统、与用户和网络的接口。研讨会将涵盖的主题包括：安全标记体系结构的现状安全标记体系结构中的指针控制和内存布局由廉价的域交叉实现的新前沿安全编程语言零内核操作系统，即基本上没有安全内核的操作系统硬件的正式验证，作为迈向可管理系统的一步高级用户界面行业路线图未来5-10年，以确定行业可以在硬件支持方面为安全传统系统和应用程序提供哪些支持，以前致力于安全主机，但也确定如何在新开发的主机处理器和用于加密和身份验证的操作系统路线图上容纳传统系统，确定如何将安全主机连接到加密介质，以及如何选择性地加密安全主机攻击场景上的存储器，识别对安全主机的威胁，以便进行设计以适应这种威胁，但也着眼于红色团队练习验证评估，识别将最近有前景的研究应用于安全主机联网验证的可行性，确定如何将安全主机连接到网络服务，例如在NSF的GENI下正在研究的那些网络服务和查找程序

roposal Number: 0653951PI: Stephanie Forrest Institution: University of New Mexico Title: Safe Computing Workshop: Introspective Hardware Architectures or Information Assurance AbstractThe University of New Mexico will host a workshop on November 29 to December 1 towards the realization of a secure computing platform. There is a pressing need for a secure host, as most of the attacks on our nation's computer and networks systems exploit weaknesses in the end points, i.e., the host computers on which users run applications. This workshop will assemble experts from academia, industry (hardware and software communities) and US Government agencies to prepare an agenda for the development of a secure host, including the hardware base, the operating system, the interface to the users and to the network. Topics to be covered in the workshop include: Status of security tagged architectures Pointer control and Memory layouts in a secure tagged architecture New Frontiers Enabled by Cheap Domain Crossings Secure Programming Language Zero Kernel Operating System, that is operating systems with essentially no security kernel Formal Verification of Hardware, as one step towards a secure host Advanced User Interfaces as a step towards a manageable system Industry Roadmap out 5-10 years, to determine what industry can offer in hardware support for security Legacy Systems and Applications, to previous work towards a secure host but also to determine how legacy systems can be accommodated on a newly-developed host processor and operating system Roadmap for Cryptography and Authentication, to determine how to interface the secure host to encrypted media and also how to selectively encrypt memory on the secure host Attack Scenarios, to identify threats to the secure host for the purpose of designing to accommodate to such threats but also to look towards a red team exercise Verification Assessment, to identify the feasibility of applying recent promising research in formal methods towards the verification of the secure host Networking, to determine how to interface the secure host to network services, such as those being studied under NSF's GENI and FIND programs