权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

Secure Software Execution System

安全软件执行系统

基本信息

批准号：
12133201
负责人：
KATO Kazuhiko
金额：
$ 25.54万
依托单位：
University of Tsukuba
依托单位国家：
日本
项目类别：
Grant-in-Aid for Scientific Research on Priority Areas
财政年份：
2000
资助国家：
日本
起止时间：
2000 至 2003
项目状态：
已结题

项目摘要

We have developed using operating systems and system software techniques for secure software execution in an open network environment. We summarize our main research topics as follows(1) Techniques for handling attacks on programs Defense again attacks We developed a technique for protecting programs that are vulnerable to attacks by isolating the software from the host environment. Detection of attacks We developed an intrusion detection system that monitors software such that the system can detect behaviors that deviate from the norm. Our system detects any such malicious behavior by examining system calls issued by the program. Minimization of damage In case the software is successfully exploited, we developed a technique to limit the privileges the software has, so that further damage can be avoided. Recovery from damage Our technology recovers from any damage caused by an attack by restoring the machine to a previous state.(2) Security and Privacy on Networks Secure Virtual Private Networks Fine-grained restrictions of what users are allowed to do are inexistent in current Virtual Private Network (VPN) systems. In our research, we attempt to solve this problem. Firewalls We developed a technology for realizing a high-performance firewall. Our technology improves on existing previous works by being able to detect unauthorized accesses that predecessors could not. Furthermore, our techniques can detect such unauthorized accesses without significant performance loss by examining the contents efficiently. Realization of Anonymity when accessing servers We developed a technology for anonymaing a user when accessing servers. This enables the protection of the user's information from being collected.

我们已经开发了使用操作系统和系统软件技术在开放的网络环境中安全的软件执行。我们总结了我们的主要研究课题如下（1）处理程序攻击的技术防御再次攻击我们开发了一种技术，通过将软件与主机环境隔离来保护易受攻击的程序。检测攻击我们开发了一个入侵检测系统，该系统可以监控软件，以便系统可以检测出偏离规范的行为。我们的系统通过检查程序发出的系统调用来检测任何此类恶意行为。如果软件被成功利用，我们开发了一种技术来限制软件的权限，从而避免进一步的损害。从损坏中恢复我们的技术通过将机器恢复到以前的状态，从攻击造成的任何损坏中恢复。(2)网络的安全和隐私安全的虚拟专用网在当前的虚拟专用网（VPN）系统中不存在对用户允许做什么的细粒度限制。在我们的研究中，我们试图解决这个问题。防火墙我们开发了一种实现高性能防火墙的技术。我们的技术改进了现有的以前的作品，能够检测未经授权的访问，前辈不能。此外，我们的技术可以检测到这种未经授权的访问，而没有显着的性能损失，通过有效地检查内容。访问服务器时匿名性的实现我们开发了一种在访问服务器时匿名用户的技术。这使得能够保护用户的信息不被收集。