NGNI-Small: Declarative Secure Networked Information Systems

NGNI-Small：声明式安全网络信息系统

• 批准号: 0812270
• 负责人: Boon Thau Loo
• 金额: $ 44.93万
• 依托单位: University of Pennsylvania
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-09-01 至 2013-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0812270&HistoricalAwards=false
• 关键词: NGNI; Small; Declarative; Secure; Networked

The goal of this project is to develop a declarative language and system for specifying, implementing, analyzing and auditing large-scale secure information systems. The project unifies three bodies of work: logic-based trust management languages, database query languages for declarative networks, and database techniques for analyzing data computations via the concept of provenance or lineage. The first part of the project investigates the design of the Secure Network Datalog (SeNDlog) language that unifies the declarative networking and logic-based access control languages. A declarative networking system with security extensions is developed to execute SeNDlog programs to implement a variety of secure networked information systems. The second part of the project applies the use of data provenance in networks for performing real-time network diagnostics and forensics. This project studies optimization techniques for computing network provenance efficiently, and analyzes opportunities presented in the unified framework across network protocols, security policies, and distributed information systems. The broader impact of this work is a unified extensible platform for developing and analyzing next-generation secure information-centric networks, including authenticated Internet-scale routing infrastructures, scalable content-based networks, and secure distributed data management systems. A graduate course titled Networking-meets-Databases is created to explore synergistic topics at the intersection of these two areas, drawing practical experiences and use cases from the project. Publications, technical reports, software and experimental data from this research aredisseminated via the project web site (http://www.cis.upenn.edu/~boonloo/decsec/).

该项目的目标是开发一种声明性语言和系统，用于指定、实施、分析和审计大规模安全信息系统。 该项目统一了三个工作主体：基于逻辑的信任管理语言、用于声明性网络的数据库查询语言以及通过来源或血统概念分析数据计算的数据库技术。 该项目的第一部分研究安全网络数据日志（SeNDlog）语言的设计，该语言统一了声明性网络和基于逻辑的访问控制语言。开发了具有安全扩展的声明式网络系统来执行SeNDlog程序以实现各种安全网络信息系统。 该项目的第二部分应用网络中的数据来源来执行实时网络诊断和取证。该项目研究有效计算网络起源的优化技术，并分析跨网络协议、安全策略和分布式信息系统的统一框架中提供的机会。这项工作更广泛的影响是一个统一的可扩展平台，用于开发和分析下一代安全的以信息为中心的网络，包括经过身份验证的互联网规模路由基础设施、可扩展的基于内容的网络和安全的分布式数据管理系统。 创建名为“网络遇见数据库”的研究生课程是为了探索这两个领域交叉点的协同主题，从项目中汲取实践经验和用例。 本研究的出版物、技术报告、软件和实验数据通过项目网站 (http://www.cis.upenn.edu/~boonloo/decsec/) 传播。