SGER: Explorations in Fine-Grained Security for Host and Network Applications

SGER：主机和网络应用的细粒度安全探索

• 批准号: 0751316
• 负责人: Patrick Winston
• 金额: --
• 依托单位: Massachusetts Institute of Technology
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-09-01 至 2010-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0751316&HistoricalAwards=false
• 关键词: SGER; Explorations; Fine; Grained; Security

National Science Foundation CISE/CNSForm 7 Review Analysis and RecommendationProposal Number: 0751316PI: Patrick Winston Institution: Massachusetts Institute of Technology Title: SGER: Explorations in Fine-Grained Security for Host and Network ApplicationProposal AbstractThis research project explores a variety of applications of and models for fine-grained security. The topics include information sharing and collaboration, tracing integrity and data provenance through computations and across network hosts, semantic accountability and traceability, network architectures utilizing security-tagged packets, as well as appropriate models for authorization systems. Although fine-grained security has not been broadly studied up to now, recent proposals for advanced information sharing systems and word-level manipulation of security data by new computer architectures demand better understandings of the applications where fine-grained security can deliver important benefits as well as the difficulty of formulating and implementing necessary security models. The range of applications is vast -- from digital libraries, scientific collaboration to legal citation, government and medical processes, intelligence and decision-making in distributed organizations, and even, Internet-based political discourse. Despite the high risk of this exploratory research, the expected payoffs will be very high if manageable approaches are identified for these wide-scope applications. The research methodology involves characterizing an exemplary application, analyzing how it benefits from fine-grained data manipulation, designing core implementation mechanisms, and proposing appropriate security models to assure integrity, confidentiality, and availability. The deliverables are a series of reports each of which discuss an application and its corresponding security model

美国国家科学基金会CISE/CNSForm 7评审分析和建议提案编号：0751316 PI：帕特里克温斯顿 院校：马萨诸塞州理工学院 职务名称： SGER：摘要本研究计画探讨细粒度安全的各种应用与模型。这些主题包括信息共享和协作，通过计算和跨网络主机跟踪完整性和数据出处，语义问责制和可追溯性，利用安全标记数据包的网络架构，以及授权系统的适当模型。虽然细粒度的安全性还没有得到广泛的研究，到现在为止，先进的信息共享系统和字级操纵的安全数据的新的计算机体系结构的最新建议，要求更好地理解的应用程序，细粒度的安全性可以提供重要的好处，以及制定和实施必要的安全模型的困难。 其应用范围非常广泛--从数字图书馆、科学合作到法律的引用、政府和医疗过程、分布式组织中的情报和决策，甚至是基于互联网的政治话语。尽管这种探索性研究的风险很高，但如果为这些广泛的应用确定了可管理的方法，预期的回报将非常高。研究方法包括描述一个典型的应用程序，分析它如何从细粒度数据操作中受益，设计核心实现机制，并提出适当的安全模型，以确保完整性，机密性和可用性。可交付成果是一系列报告，每个报告都讨论一个应用程序及其相应的安全模型