TC: Small: Analysis for a Cloud of Policies: Foundations and Tools

TC：小型：政策云分析：基础和工具

• 批准号: 1116557
• 负责人: Daniel Dougherty
• 金额: $ 49.96万
• 依托单位: Worcester Polytechnic Institute
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-08-01 至 2016-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1116557&HistoricalAwards=false
• 关键词: TC; Small; Analysis; Cloud; Policies

Computers and people live in a world governed by policy. At the lowest level, policies determine how information flows within networks; at the highest level, they describe how users' personal information is shared across applications. Of course, end-users, as policy authors, make mistakes: rules can have unintended consequences and multiple policies can interact in ways that their authors didn't intend. Users can benefit from tools to help them understand the policies they write and maintain. Policy analysis refers to rigorous methods for detecting these situations before they cause harm. Given the personal and sensitive information migrating to cloud-based applications, analyzers for mainstream policy contexts have clear impact on computing infrastructure.Prior research has shown that first-order logic is a suitable foundation for capturing and analyzing many application- and network-based policies. In particular, analyses based on scenario-finding provide concrete and detailed feedback for policy authors. This project focuses on techniques to make scenario-finding effective for real-world policies based on first-order logic. Specifically, the project pursues (1) foundational research on algorithms for model-finding in first-order logic, (2) methods to analyze federations of policies across multiple levels of abstraction (such as found in cloud computing), (3) handling additional policy features such as numeric constraints and dynamic network routing, and (4) methods to automatically generate repairs to policies against requirements or scenarios. The PIs' existing Margrave policy analyzer serves as a testbed and deployment vehicle for this research.

计算机和人类生活在一个由政策控制的世界里。在最低层次上，政策决定信息如何在网络内流动；在最高层次上，它们描述了用户的个人信息如何在应用程序之间共享。当然，作为策略作者的最终用户也会犯错误：规则可能会产生意想不到的后果，多个策略可能会以作者意想不到的方式进行交互。用户可以从帮助他们理解所编写和维护的策略的工具中获益。政策分析是指在这些情况造成伤害之前发现它们的严格方法。考虑到个人和敏感信息迁移到基于云的应用程序，主流策略上下文的分析程序对计算基础设施有明显的影响。先前的研究表明，一阶逻辑是捕获和分析许多基于应用程序和网络的策略的合适基础。特别是，基于情景发现的分析为政策制定者提供了具体和详细的反馈。该项目侧重于基于一阶逻辑使场景查找对现实世界的策略有效的技术。具体来说，该项目追求(1)一阶逻辑中模型发现算法的基础研究，(2)跨多个抽象层次（如云计算）分析策略联合的方法，(3)处理额外的策略特征，如数字约束和动态网络路由，以及(4)根据需求或场景自动生成策略修复的方法。pi现有的Margrave策略分析器可作为本研究的测试平台和部署工具。