CAREER: Assertions for Distributed Applications

职业：分布式应用程序的断言

• 批准号: 2145471
• 负责人: Aurojit Panda
• 金额: $ 70万
• 依托单位: New York University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-02-01 至 2027-01-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2145471&HistoricalAwards=false
• 关键词: CAREER; Assertions; Distributed; Applications

Distributing computation on multiple machines is the primary tool used for building software that can operate across multiple computers or despite computer failures. As a result, distributed applications that run on multiple machines lie at the core of most large services such as Google, Netflix, and air-traffic control systems. However, writing correct distributed applications is challenging. Bugs in distributed applications have resulted in downtime for several services, including Facebook, Netflix, and the United Kingdom's air-traffic control system. This proposal aims to develop techniques to allow distributed applications to detect and respond to bugs at runtime, thus minimizing their impact.The proposed research has three core thrusts. The first thrust focuses on developing efficient mechanisms to detect distributed application bugs by evaluating logical assertions about application state, and developing efficient techniques to respond to detected bugs. The second thrust focuses on developing techniques to check automatically whether the assertions provided by a programmer are both necessary and sufficient for detecting bugs in the distributed application. The third thrust focuses on developing techniques to identify the root cause of a bug detected at runtime, thus allowing programmers to fix the underlying issue.The mechanisms proposed by the project can improve the resilience and trustworthiness of widely used online services and infrastructure. The project will produce an open-source framework that incorporates these mechanisms and produce documentation and tutorials to simplify the adoption of these ideas. Additionally, the proposal plans to develop new programming assignments that use the proposed assertion checking mechanism to allow students to validate their approach to failure handling. Extending assignments in this way improves distributed systems pedagogy. The proposed project will develop new graduate and undergraduate distributed systems classes built around these assignments. The projects and course materials developed for these classes will be freely available to encourage wider adoption.All source code, data, papers, documentation, and course materials produced as a part of the proposed work will be available from https://cims.nyu.edu/daf/. All material will remain available for at least five years after the end of this project or five years after publication, whichever is later. All source code will be released under an ISC (Internet Systems Consortium) or similarly permissive license.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

在多台计算机上分布计算是用于构建可跨多台计算机运行或在计算机出现故障的情况下运行的软件的主要工具。因此，在多台机器上运行的分布式应用程序是谷歌、Netflix和空中交通管制系统等大多数大型服务的核心。然而，编写正确的分布式应用程序是具有挑战性的。分布式应用程序中的漏洞已导致多项服务停机，包括Facebook、Netflix和英国的空中交通管制系统。该建议旨在开发技术，以允许分布式应用程序在运行时检测并响应错误，从而将其影响降至最低。第一个重点是开发通过评估有关应用程序状态的逻辑断言来检测分布式应用程序错误的高效机制，并开发有效的技术来响应检测到的错误。第二个重点是开发技术，以自动检查程序员提供的断言对于检测分布式应用程序中的错误是否既必要又充分。第三个重点是开发技术，以确定在运行时检测到的错误的根本原因，从而允许程序员修复潜在问题。该项目提出的机制可以提高广泛使用的在线服务和基础设施的弹性和可信性。该项目将产生一个结合了这些机制的开放源码框架，并编制文件和教程，以简化对这些想法的采纳。此外，该提案计划开发新的编程作业，使用所建议的断言检查机制来允许学生验证他们处理故障的方法。以这种方式扩展作业可以改进分布式系统教学方法。拟议的项目将围绕这些作业开发新的研究生和本科生分布式系统课程。为这些课程开发的项目和课程材料将免费提供，以鼓励更广泛的采用。作为拟议工作的一部分，所有源代码、数据、论文、文档和课程材料都将从https://cims.nyu.edu/daf/.获得所有材料将在本项目结束后或出版后五年内保留至少五年，以较后者为准。所有源代码将在ISC(互联网系统联盟)或类似许可下发布。该奖项反映了NSF的法定使命，并已通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Access Control for Database Applications: Beyond Policy Enforcement

数据库应用程序的访问控制：超越策略执行

• DOI: 10.1145/3593856.3595905
• 发表时间: 2023
• 期刊: ACM
• 作者: Zhang, Wen;Panda, Aurojit;Shenker, Scott
• 通讯作者: Shenker, Scott

Blockaid: Data Access Policy Enforcement for Web Applications

Blockaid：Web 应用程序的数据访问策略执行

• 发表时间: 2022
• 期刊: OSDI
• 作者: Zhang, Wen;Sheng, Eric;Chang, Michael;Panda, Aurojit;Sagiv, Mooly;Shenker, Scott
• 通讯作者: Shenker, Scott