EAGER: Accountability Through Architecture for Decentralized Systems

EAGER：通过去中心化系统架构承担责任

• 批准号: 1449159
• 负责人: Richard Taylor
• 金额: $ 20万
• 依托单位: University of California-Irvine
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-09-01 至 2016-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1449159&HistoricalAwards=false
• 关键词: EAGER; Accountability; Through; Architecture; Decentralized

Advancing the ability to create trustworthy computing systems demands fundamental advances in many technologies and at many levels of abstraction. Creating trustworthy applications requires more than a set of excellent building blocks, however. It demands an architectural understanding; one that shows a viable approach to utilizing many contributions in mutually consistent and supportive ways. This project springs from a focus on achieving security through innovative software architecture, wherein novel combinations of technologies are applied and the essential mechanisms of security and accountability are built in. In particular, the security concerns of prevent, detect, isolate, mitigate, and blame demand an architectural solution wherein systemic accountability is an architectural consequence, rather than an option.To this end the proposal offers a novel alternative architectural style, COAST, for constructing secure, large-scale, decentralized systems, coupled with a focus on capability accounting. A capability is an unforgeable reference whose possession confers both authority and rights to a principal. Capability accounting is the practice of producing and maintaining a record or statement of the generation, transfer, or use of capability relating to a particular period or purpose. The approach facilitates the fine-grained use of capability accounting to prevent security problems, isolate them, mitigate consequences of problems, and, if necessary, assign blame for use in subsequent actions. Target applications are typified by SOAs (Service Oriented Architectures), such as those found in e-commerce, where there are multiple interacting parties but no single overarching authority. Our approach is inspired and informed by the daily use of broad accounting principles in other industries, notably Hazard Analysis and Critical Control Points (HACCP), a systematic preventive approach to hazards in production processes, and the generally accepted accounting principles (GAAP) of finance and business. Our immediate focus is assessing the viability of this approach in a notional Internet-of-Things application, where we rely on careful measurement and engineering analysis to guide future larger-scale projects.

提高创建可信计算系统的能力需要在许多技术和多个抽象级别上取得根本性的进步。然而，创建值得信赖的应用程序需要的不仅仅是一组优秀的构建块。它需要对体系结构的理解；一种展示了以相互一致和支持的方式利用许多贡献的可行方法。该项目的重点是通过创新的软件架构实现安全，其中应用了新的技术组合，并内置了基本的安全和问责机制。特别是，预防、检测、隔离、缓解和指责的安全问题需要一种体系结构解决方案，其中系统责任是体系结构的结果，而不是一种选择。为此，该提案提供了一种新的替代体系结构风格-STATE，用于构建安全、大规模、分散的系统，并侧重于能力核算。能力是一种不可伪造的参考，它的拥有既赋予委托人权威，也赋予委托人权利。能力会计是编制和维护与特定时期或目的有关的能力的产生、转移或使用的记录或报表的实践。该方法有助于细粒度地使用功能记账来预防安全问题、隔离问题、减轻问题的后果，并在必要时指定在后续操作中使用的责任。目标应用程序以面向服务的体系结构(SOA)为代表，例如电子商务中的应用程序，其中有多个交互各方，但没有单一的统领权威机构。我们的方法是受到其他行业日常使用广泛会计原则的启发和启发，特别是危险分析和关键控制点(HACCP)、生产过程中危险的系统预防方法以及金融和商业的公认会计原则(GAAP)。我们目前的重点是评估这种方法在概念上的物联网应用中的可行性，在这种应用中，我们依赖仔细的测量和工程分析来指导未来的更大规模的项目。