Safe Computing Workshop: Introspective Hardware Architectures for Information Assurance

产品编号：0653951 PI：Stephanie Forrest 机构：新墨西哥州大学 职务名称： 安全计算研讨会：反思硬件架构或信息保障 摘要新墨西哥州大学将于11月29日至12月1日举办一个研讨会，以实现一个安全的计算平台。 迫切需要一个安全的主机，因为对我国计算机和网络系统的大多数攻击都利用了端点的弱点，即，用户运行应用程序的主机。 该研讨会将汇集来自学术界、工业界（硬件和软件界）和美国政府机构的专家，为开发安全主机制定议程，包括硬件基础、操作系统、用户和网络接口。 研讨会的主题包括：安全标记架构的现状安全标记架构中的指针控制和内存布局通过廉价域交叉实现的新领域安全编程语言零内核操作系统，即基本上没有安全内核的操作系统 硬件的正式验证，作为迈向安全主机的一步高级用户界面作为迈向可管理系统的一步 制定5-10年的行业路线图，以确定哪些行业可以提供安全硬件支持 遗留系统和应用程序，以实现安全主机的先前工作，但也要确定如何在新开发的主机处理器和操作系统上容纳遗留系统 加密和身份验证路线图，用于确定如何将安全主机连接到加密介质，以及如何选择性地加密安全主机上的内存 攻击场景，以识别安全主机的威胁，以便进行设计以适应此类威胁，但也要考虑红队演习 验证评估，以确定将最近有前途的正式方法研究应用于安全主机网络验证的可行性，以确定如何将安全主机与网络服务连接，例如NSF的GENI和FIND计划正在研究的那些

roposal Number: 0653951PI: Stephanie Forrest Institution: University of New Mexico Title: Safe Computing Workshop: Introspective Hardware Architectures or Information Assurance AbstractThe University of New Mexico will host a workshop on November 29 to December 1 towards the realization of a secure computing platform. There is a pressing need for a secure host, as most of the attacks on our nation's computer and networks systems exploit weaknesses in the end points, i.e., the host computers on which users run applications. This workshop will assemble experts from academia, industry (hardware and software communities) and US Government agencies to prepare an agenda for the development of a secure host, including the hardware base, the operating system, the interface to the users and to the network. Topics to be covered in the workshop include: Status of security tagged architectures Pointer control and Memory layouts in a secure tagged architecture New Frontiers Enabled by Cheap Domain Crossings Secure Programming Language Zero Kernel Operating System, that is operating systems with essentially no security kernel Formal Verification of Hardware, as one step towards a secure host Advanced User Interfaces as a step towards a manageable system Industry Roadmap out 5-10 years, to determine what industry can offer in hardware support for security Legacy Systems and Applications, to previous work towards a secure host but also to determine how legacy systems can be accommodated on a newly-developed host processor and operating system Roadmap for Cryptography and Authentication, to determine how to interface the secure host to encrypted media and also how to selectively encrypt memory on the secure host Attack Scenarios, to identify threats to the secure host for the purpose of designing to accommodate to such threats but also to look towards a red team exercise Verification Assessment, to identify the feasibility of applying recent promising research in formal methods towards the verification of the secure host Networking, to determine how to interface the secure host to network services, such as those being studied under NSF's GENI and FIND programs