TC: Medium: Collaborative Research:Next-Generation Infrastructure for Trustworthy Web Applications

合作提案0905684 (UCI ？Franz) / 0905650 (UCSC ？【摘要】许多传统上由在台式计算机上运行的独立程序执行的服务正在被迁移到？Web 2.0 ?驻留的应用程序、远程服务？在云端？是通过浏览器访问的吗？这种迁移过程提供了一个独特的机会，可以重新设计软件的构造方式，增加一些额外的功能，以减少全球信息基础设施对诸如病毒、网络攻击、隐私丢失和完整性违反等问题的脆弱性。考虑到这一目标，本项目为可信赖的web应用程序设计并实现了下一代基础设施。它将现有的Web 2.0技术发展成为更值得信赖的？Web 2.秒?通过在服务提供者和用户中普遍引入信息标记和强大的信息流控制来实现版本？S端，以及中间的所有路径。新Web 2的一个关键特性。Sec架构是指所有应用程序都在虚拟机（VM）之上执行，而不是直接在物理硬件上执行。因此，VM在任何时候都保持对数据的完全控制，允许它强制执行信息。现在的政策保证安全&amp；#64257；真实性和完整性。甚至是在Web上运行的恶意或有缺陷的程序。Sec VM不能导致违反这些策略的任何操作。包括研究生和本科生在内的强大教育组成部分使项目更加完善。

Collaborative Proposal 0905684 (UCI ? Franz) / 0905650 (UCSC ? Flanagan)Next-Generation Infrastructure for Trustworthy Web ApplicationsAbstractMany services traditionally performed by stand-alone programs running on desktop computers are being migrated to ?Web 2.0? applications, remote services that reside ?in the cloud? and are that accessed through a browser. This migration process offers a unique opportunity to re-engineer the way that software is constructed, adding some extra capabilities that reduce the vulnerability of the global information infrastructure to problems such as viruses, cyber-attacks, loss of privacy, and integrity violations. With this goal in mind, this project designs and implements a next-generation infrastructure for trustworthy web applications. It evolves the existing Web 2.0 technologies into a more trustworthy ?Web 2.Sec? version by introducing information-labeling and strong information-flow controls pervasively at the service provider, at the user?s end, and on all paths in between.A key feature of the new Web 2.Sec architecture is that all application programs are executed on top of a virtual machine (VM) rather than directly on physical hardware. Hence the VM retains full control over the data at all times, allowing it to enforce information-flow policies that guarantee confidentiality and integrity. Even a malicious or faulty program running on top of the Web 2.Sec VM cannot cause any action that would violate these policies.A strong educational component involving both graduate and undergraduate students rounds off the project.