CT-ER : Runtime Techniques for protecting confidential data in large scale software

CT-ER：保护大型软件中机密数据的运行时技术

• 批准号: 0716584
• 负责人: Venkat Venkatakrishnan
• 金额: --
• 依托单位: University of Illinois at Chicago
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-08-01 至 2010-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0716584&HistoricalAwards=false
• 关键词: CT; ER; Runtime; Techniques; protecting

With the increasing amount of confidential information being handledby computer software, ensuring privacy of personal information isbecoming a great concern. To address this concern, this projectinvestigates mechanisms that trackthe use of sensitive data handled by software programs with the goal ofpreventing unauthorized disclosure.The technical focus is on the use of runtime mechanisms that track theuse of sensitive data. There are three thrust areas investigated inthis proposal (a) mechanisms for process based separation andruntime checking for enforcing confidentiality policies(b) techniques for erasing sensitive data from programsafter their intended use and (c) techniques for tracking implicitinformation flows. The project uses novel ideas that build on the PI'sprior work in language based techniques for addressingfundamental research questions in these thrust areas.To maximize impact, this project will also implement toolsthat will apply these techniques to large scale softwareapplications. These tools will enable programmers and end usersto retrofit programs in order to safeguard theirconfidential data. These tools will be distributed using theWeb for the widest possible dissemination and further enhancement.With regards to education, this project aims to train both graduate andundergraduate students to perform research in the the application oflanguage based methods for computer security and privacy.

随着计算机软件处理的机密信息越来越多，个人信息的隐私保护成为一个非常值得关注的问题。为了解决这一问题，该项目调查了跟踪由软件程序处理的敏感数据的使用的机制，以防止未经授权的泄露。技术重点是跟踪敏感数据使用的运行时机制的使用。该提案研究了三个主要领域：(A)基于进程的分离和执行保密策略的运行时检查的机制；(B)在程序预期使用之后从程序中删除敏感数据的技术；以及(C)跟踪隐含信息流的技术。该项目使用建立在PI在基于语言的技术方面的工作的新想法来解决这些推力领域的基础研究问题。为了最大限度地产生影响，该项目还将实施将这些技术应用于大规模软件应用的工具。这些工具将使程序员和最终用户能够对程序进行改造，以保护他们的机密数据。这些工具将通过网络分发，以便尽可能广泛地传播和进一步增强。在教育方面，该项目旨在培训研究生和本科生进行基于语言的计算机安全和隐私方法应用方面的研究。