Safe Computing Workshop: Introspective Hardware Architectures for Information Assurance

提案编号：0653951PI: Stephanie Forrest机构：新墨西哥大学标题：安全计算研讨会：内省硬件架构或信息保障摘要新墨西哥大学将于11月29日至12月1日举办一次关于实现安全计算平台的研讨会。我们迫切需要一个安全的主机，因为大多数对我们国家的计算机和网络系统的攻击都利用了终端的弱点，即用户运行应用程序的主机。本次研讨会将聚集来自学术界、工业界（硬件和软件社区）和美国政府机构的专家，为开发安全主机准备一个议程，包括硬件基础、操作系统、用户和网络接口。工作坊的主题包括：安全标记体系结构中的指针控制和内存布局的现状安全标记体系结构中的指针控制和内存布局通过廉价域交叉实现的新领域安全编程语言零内核操作系统，即基本上没有安全内核的操作系统硬件的正式验证，作为迈向安全主机的一步高级用户界面作为迈向可管理系统的一步确定哪些行业可以为安全遗留系统和应用程序提供硬件支持，以及之前对安全主机的工作，还要确定如何将遗留系统容纳在新开发的主机处理器和操作系统上加密和身份验证路线图，确定如何将安全主机连接到加密媒体，以及如何有选择地加密安全主机攻击场景上的内存。识别对安全主机的威胁，以便设计适应此类威胁的目的，但也要考虑红队演习验证评估，确定应用最近有前途的研究方法来验证安全主机网络的可行性，确定如何将安全主机接口到网络服务，例如在NSF的GENI和FIND计划下正在研究的服务

roposal Number: 0653951PI: Stephanie Forrest Institution: University of New Mexico Title: Safe Computing Workshop: Introspective Hardware Architectures or Information Assurance AbstractThe University of New Mexico will host a workshop on November 29 to December 1 towards the realization of a secure computing platform. There is a pressing need for a secure host, as most of the attacks on our nation's computer and networks systems exploit weaknesses in the end points, i.e., the host computers on which users run applications. This workshop will assemble experts from academia, industry (hardware and software communities) and US Government agencies to prepare an agenda for the development of a secure host, including the hardware base, the operating system, the interface to the users and to the network. Topics to be covered in the workshop include: Status of security tagged architectures Pointer control and Memory layouts in a secure tagged architecture New Frontiers Enabled by Cheap Domain Crossings Secure Programming Language Zero Kernel Operating System, that is operating systems with essentially no security kernel Formal Verification of Hardware, as one step towards a secure host Advanced User Interfaces as a step towards a manageable system Industry Roadmap out 5-10 years, to determine what industry can offer in hardware support for security Legacy Systems and Applications, to previous work towards a secure host but also to determine how legacy systems can be accommodated on a newly-developed host processor and operating system Roadmap for Cryptography and Authentication, to determine how to interface the secure host to encrypted media and also how to selectively encrypt memory on the secure host Attack Scenarios, to identify threats to the secure host for the purpose of designing to accommodate to such threats but also to look towards a red team exercise Verification Assessment, to identify the feasibility of applying recent promising research in formal methods towards the verification of the secure host Networking, to determine how to interface the secure host to network services, such as those being studied under NSF's GENI and FIND programs