TC: Medium: Collaborative Research:Next-Generation Infrastructure for Trustworthy Web Applications

合作提案0905684（UCI？Franz）/ 0905650（UCSC？下一代可信Web应用程序的基础设施摘要许多传统上由运行在台式计算机上的独立程序执行的服务正在迁移到？Web 2.0？应用程序、远程服务驻留？在云中？并且通过浏览器访问。 这一迁移过程提供了一个独特的机会，可以重新设计软件的构建方式，增加一些额外的功能，减少全球信息基础设施对病毒、网络攻击、隐私丢失和完整性侵犯等问题的脆弱性。考虑到这一目标，该项目设计和实现了一个下一代的基础设施，值得信赖的Web应用程序。 它将现有的Web 2.0技术演变成一个更值得信赖的？Web 2.Sec？版本通过引入信息标签和强大的信息流控制普遍在服务提供商，在用户？新的Web 2.Sec体系结构的一个关键特性是所有应用程序都在虚拟机（VM）上执行，而不是直接在物理硬件上执行。 因此，虚拟机始终保持对数据的完全控制，允许它实施信息流策略，以保证一致性和完整性。 即使是在Web 2.Sec VM上运行的恶意或错误程序也不会导致任何违反这些政策的行为。一个涉及研究生和本科生的强大的教育组件完成了这个项目。

Collaborative Proposal 0905684 (UCI ? Franz) / 0905650 (UCSC ? Flanagan)Next-Generation Infrastructure for Trustworthy Web ApplicationsAbstractMany services traditionally performed by stand-alone programs running on desktop computers are being migrated to ?Web 2.0? applications, remote services that reside ?in the cloud? and are that accessed through a browser. This migration process offers a unique opportunity to re-engineer the way that software is constructed, adding some extra capabilities that reduce the vulnerability of the global information infrastructure to problems such as viruses, cyber-attacks, loss of privacy, and integrity violations. With this goal in mind, this project designs and implements a next-generation infrastructure for trustworthy web applications. It evolves the existing Web 2.0 technologies into a more trustworthy ?Web 2.Sec? version by introducing information-labeling and strong information-flow controls pervasively at the service provider, at the user?s end, and on all paths in between.A key feature of the new Web 2.Sec architecture is that all application programs are executed on top of a virtual machine (VM) rather than directly on physical hardware. Hence the VM retains full control over the data at all times, allowing it to enforce information-flow policies that guarantee confidentiality and integrity. Even a malicious or faulty program running on top of the Web 2.Sec VM cannot cause any action that would violate these policies.A strong educational component involving both graduate and undergraduate students rounds off the project.