CT-ER : Runtime Techniques for protecting confidential data in large scale software

点击翻译按钮获取中文摘要

With the increasing amount of confidential information being handledby computer software, ensuring privacy of personal information isbecoming a great concern. To address this concern, this projectinvestigates mechanisms that trackthe use of sensitive data handled by software programs with the goal ofpreventing unauthorized disclosure.The technical focus is on the use of runtime mechanisms that track theuse of sensitive data. There are three thrust areas investigated inthis proposal (a) mechanisms for process based separation andruntime checking for enforcing confidentiality policies(b) techniques for erasing sensitive data from programsafter their intended use and (c) techniques for tracking implicitinformation flows. The project uses novel ideas that build on the PI'sprior work in language based techniques for addressingfundamental research questions in these thrust areas.To maximize impact, this project will also implement toolsthat will apply these techniques to large scale softwareapplications. These tools will enable programmers and end usersto retrofit programs in order to safeguard theirconfidential data. These tools will be distributed using theWeb for the widest possible dissemination and further enhancement.With regards to education, this project aims to train both graduate andundergraduate students to perform research in the the application oflanguage based methods for computer security and privacy.