权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

TC:Medium: The impact of operating systems on application robustness

TC：中：操作系统对应用程序稳健性的影响

基本信息

批准号：
0964575
负责人：
Jon Solworth
金额：
$ 115.14万
依托单位：
University of Illinois at Chicago
依托单位国家：
美国
项目类别：
Continuing Grant
财政年份：
2010
资助国家：
美国
起止时间：
2010-03-15 至 2014-12-31
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=0964575&HistoricalAwards=false
关键词：
TC Medium impact operating systems

项目摘要

It is widely estimated that one in four computers is part of a botnet, and therefore under the control of an attacker. These computers are used to loot bank accounts, send spam, and perform DDoS (Distributed Denial of Service) attacks. The attacker almost always gains control of these computers by remotely attacking applications or the operating system on which these applications depend. The robustness---the ability to withstand attack---of the operating system has long been known as essential to produce secure systems. But even the most robust operating system cannot prevent applications from being exploited, and therefore has a limited effect on application robustness.This project investigates the effect of the operating system on application robustness, and in particular the effect that the operating-system interface (the architecture and details of its system calls) has on the ability to write more robust applications. In particular, this project seeks to eliminate pitfalls in system calls; these pitfalls lead to security holes and make application development much more difficult. Eliminating pitfalls (and thus the resulting security holes) makes it more difficult to successfully attack applications. To evaluate the extent to which pitfalls can be eliminated, this project is building a operating system called Ethos. The Ethos interface will be analyzed and evaluated on its own and versus those in traditional operating systems.

据普遍估计，四分之一的计算机是僵尸网络的一部分，因此受到攻击者的控制。这些计算机被用来掠夺银行账户、发送垃圾邮件和执行DDoS（分布式拒绝服务）攻击。攻击者几乎总是通过远程攻击应用程序或这些应用程序所依赖的操作系统来获得对这些计算机的控制。长期以来，操作系统的健壮性（抵御攻击的能力）一直被认为是生产安全系统的必要条件。但是，即使是最健壮的操作系统也不能防止应用程序被利用，因此对应用程序健壮性的影响有限。本项目研究操作系统对应用程序健壮性的影响，特别是操作系统接口（其系统调用的体系结构和细节）对编写更健壮的应用程序的能力的影响。特别地，这个项目试图消除系统调用中的缺陷；这些缺陷会导致安全漏洞，并使应用程序开发变得更加困难。消除陷阱（以及由此产生的安全漏洞）使成功攻击应用程序变得更加困难。为了评估可以消除缺陷的程度，这个项目正在构建一个名为Ethos的操作系统。Ethos界面将被单独分析和评估，并与传统操作系统中的界面进行比较。