Vulnerability Assessment of Grid Software Infrastructure

网格软件基础设施的脆弱性评估

• 批准号: 0844219
• 负责人: Barton Miller
• 金额: --
• 依托单位: University of Wisconsin-Madison
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-09-15 至 2010-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0844219&HistoricalAwards=false
• 关键词: Vulnerability; Assessment; Grid; Software; Infrastructure

National Science FoundationNSF Software Development for Cyberinfrastructure (SDCI) ProgramOffice of CyberinfrastructureProposal Number: 0844219Principal Investigator: Barton MillerInstitution: University of Wisconsin-MadisonProposal Title: Vulnerability Assessment of Grid Software Infrastructure Project SummaryThis Small Grants for Exploratory Research (SGER) proposal seeks to identify security vulnerabilities in software for Grid environments. Proposed activities cover a range of research and development in vulnerability identification and analysis. A new process called First Principles based on Vulnerability Assessment (FPVA) will be pursued that includes a 4-level scale to identify high-value assets and deriving threats based on their use. The activities promise to produce algorithms, techniques, and tools used by software developers and the grid community in identifying software vulnerabilities. Assessment will be performed on two security systems used actively in grid environments today. Finally, the work intends to help form the basis of a more involved and longer term research and development effort in software vulnerability assessment and safer coding practices. Intellectual merit of the proposal lies in its potential contributions to fundamental approaches to software vulnerability assessment, including a new process, new algorithms, new tools, and formal characterizations of vulnerabilities. Broader impact is characterized in the work?s potential to significantly improve security and reliability of grid software used in environments supporting the entire NSF community.

国家科学基金会NSF网络基础设施软件开发（SDCI）计划网络基础设施办公室提案编号：0844219主要研究员：巴顿米勒机构：威斯康星大学麦迪逊分校提案标题：网格软件基础设施脆弱性评估项目摘要这一探索性研究（SGER）小赠款提案旨在确定网格环境中软件的安全漏洞。拟议的活动包括脆弱性识别和分析方面的一系列研究和发展。一个名为“基于脆弱性评估的首要原则”（FPVA）的新流程将被推行，其中包括一个4级量表，以确定高价值资产并根据其使用情况得出威胁。这些活动承诺产生软件开发人员和网格社区在识别软件漏洞时使用的算法、技术和工具。评估将在两个安全系统上进行积极使用网格环境中的今天。最后，这项工作旨在帮助形成一个更参与和更长期的研究和开发工作的基础，在软件脆弱性评估和更安全的编码实践。该建议的智力价值在于其潜在的贡献，软件脆弱性评估的基本方法，包括一个新的过程，新的算法，新的工具，和正式的脆弱性表征。更广泛的影响是工作的特点？的潜力，以显着提高安全性和可靠性的网格软件中使用的环境，支持整个NSF社区。