TC: Medium: Collaborative Research:Next-Generation Infrastructure for Trustworthy Web Applications

协作建议书0905684(UCI？弗朗茨)/0905650(加州大学洛杉矶分校？Flanagan)下一代可信Web应用基础架构摘要许多传统上由台式计算机上运行的独立程序执行的服务正在迁移到？Web 2.0？驻留在云中的应用程序、远程服务？并且是通过浏览器访问的。此迁移过程提供了重新设计软件构建方式的独特机会，添加了一些额外功能，可降低全球信息基础设施对病毒、网络攻击、隐私丢失和完整性破坏等问题的脆弱性。考虑到这一目标，该项目为值得信赖的Web应用程序设计并实现了下一代基础设施。它将现有的Web2.0技术发展成更值得信赖的Web2.Sec？通过引入信息标签和强大的信息流控制，在服务提供商、用户端和之间的所有路径上无处不在。新的Web2.Sec体系结构的一个关键特征是所有应用程序都在虚拟机(VM)之上执行，而不是直接在物理硬件上执行。因此，VM始终保持对数据的完全控制，使其能够强制实施保证完整性和完整性的信息策略。即使是在Web2.Sec VM上运行的恶意或有缺陷的程序也不会导致任何违反这些政策的行为。涉及研究生和本科生的强大教育部分完善了该项目。

Collaborative Proposal 0905684 (UCI ? Franz) / 0905650 (UCSC ? Flanagan)Next-Generation Infrastructure for Trustworthy Web ApplicationsAbstractMany services traditionally performed by stand-alone programs running on desktop computers are being migrated to ?Web 2.0? applications, remote services that reside ?in the cloud? and are that accessed through a browser. This migration process offers a unique opportunity to re-engineer the way that software is constructed, adding some extra capabilities that reduce the vulnerability of the global information infrastructure to problems such as viruses, cyber-attacks, loss of privacy, and integrity violations. With this goal in mind, this project designs and implements a next-generation infrastructure for trustworthy web applications. It evolves the existing Web 2.0 technologies into a more trustworthy ?Web 2.Sec? version by introducing information-labeling and strong information-flow controls pervasively at the service provider, at the user?s end, and on all paths in between.A key feature of the new Web 2.Sec architecture is that all application programs are executed on top of a virtual machine (VM) rather than directly on physical hardware. Hence the VM retains full control over the data at all times, allowing it to enforce information-flow policies that guarantee confidentiality and integrity. Even a malicious or faulty program running on top of the Web 2.Sec VM cannot cause any action that would violate these policies.A strong educational component involving both graduate and undergraduate students rounds off the project.