Descriptions and Negotiation Models of Security Policies

作为建立下一代安全信息基础设施的第一步，我们调查了以下三个领域，代表了三种不同的观点：描述、用户和系统1。灵活的安全策略描述方案及其执行机制考虑到在互联网时代，相互不可信任的各方可能不得不相互协作或进行交易，我们提出了一种新的与隐私保护兼容的安全策略模型。我们的研究成果包括基于属性认证的策略协商模型、基于安全自动机的描述方案、带工具的执行机制和带部分评估的优化。安全软件系统的构建和操作的便捷方法我们建议由开发人员、运营商和最终用户(半)自动地构建和操作安全软件系统。我们的研究成果包括从包管理器的信息中自动开发安全策略、安全编程语言处理器的半自动构建、安全软件的开发环境(包括可视化语言系统和调试器)。下一代信息基础设施的基础我们为利用大量资源的计算系统提出了各种安全机制。我们的研究成果包括容错高性能通信库、可扩展的认证算法、PC集群的远程安装和恢复工具、解决虚拟组织间干扰的虚拟机技术。

As a first step to building next generation secure information infrastructures, we have investigated the following three areas, representing three different viewpoints : descriptions, users, and systems.1. Flexible Security Policy Description Schemes and Their Enforcement Mechanisims Taking account that mutual ly untrusted parties may have to collaborate or do trade with one another in the Internet era, we propose a new model of security policy that is compatible with privacy protections. Our research results include a model of policy negotiation using at tribute authentications, description schemes based upon security automata, an enforcement mechanism with instrumentation, and optimization with partial evaluations.2. Convenient Methodologies for Constructions and Operations of Secure Software Systems We propose (semi-) automated construct ions and operations of secure software systems by developers, operators, and end-users. Our research results include automatic exploitations of security policies from information of package managers, semi-automated constructions of secure programuing language processors, development environments of secure software including a visual language system and a debugger.3. Foundations of Next Generation Information Infrastructures We propose various security mechanisms for computing systems utilizing massive resources. Our research results include a fault-tolerant and high performance communication library, a scalable authentication algorithm, a remote installation and recovery tool for PC clusters, a virtual machine technology for the resolution of interference among virtual organizations.