Secure Programming Languages Based on Mobile Code

我们研究了基于移动代码的安全编程语言。我们从理论和实践两个方面对编程语言和系统软件的安全性进行了必要的研究。首先，我们系统地解决了编程语言中的问题，这是软件开发中最重要的元素。解决方案不是即兴的，而是基于坚实的理论。此外，我们在深入了解目标系统的基础上，通过系统化的解决方案解决了系统软件中的研究问题。这项研究的成果包括：C编程语言的安全编译器(Fail-Safe C)，Fail-Safe C的接口定义语言，使用类型系统保证安全性的操作系统(内核模式Linux)，防御网络免受分布式拒绝服务攻击的系统(MovingFirewall)，密码Lambda演算，字符串操作的正则表达式类型，自修复引用监视器，程序模块之间的细粒度访问控制机制，支持移动代码描述的编程语言(Java和Java GoX)，Java的对象使用分析，动态类型编程语言方案的高效基于Regjon的内存管理，以及一种用于分布式计算中的访问控制的典型系统。其结果得到了国际计算机科学界的高度评价。这项研究在学术界和工业界产生了重大影响，发布了三款软件，发表了约30篇参考论文。我们获得了四个享有盛誉的奖项，包括日本软件科学学会颁发的最佳论文奖和日经商业出版公司颁发的最佳技术奖。

We studied secure programming languages based on mobile code. We worked on essential research issues in security of programming languages and system software from both theoretical and practical aspects. First we gave a systematic solution to problems in programming languages, which is the most important element in software development. The solution is not ad-hoc but based on a solid theory. Furthermore, we addressed research issues in system software with a systematic solution based on deep understanding of target systems. The results of this research include a secure compiler for the C programming language (Fail-Safe C), an interface definition language for Fail-Safe C, an operating system that guarantees security using type systems (Kernel Mode Linux), a system that defends networks against distributed denial of service attacks (MovingFirewall), cryptographic lambda calculus, regular expression types for string operations, self-repairing reference monitors, a fine-grain access control mechanism between program modules, programming languages that support the description of mobile code (JavaGO and JavaGoX), object usage analysis for Java, efficient regjon-based memory management for a dynamical ly-typed programming language Scheme, and a type system for access control in distributed computation. The results are highly evaluated by internat ional communit of computer science. This research had a significant impact on academic and industrial fields by releasing three software and publishing about 30 refereed papers. We received four prestigious awards including the best paper award from Japan Society for Software Science and the best technology award from Nikkei Business Publications Inc.