Security engineering for large-scale distributed software applications

点击翻译按钮获取中文摘要

Security is an essential feature and foremost concern to Internet and enterprise distributed software applications. However, the adoption of secure distributed applications by commercial and government organizations is considerably hampered by the prohibitively high cost of ownership and the inability to support real-world applications and infrastructures. The general goal of my research is to explore new methods for designing and managing security mechanisms for large-scale distributed applications. Specifically, I will investigate new authorization architectures for medium-to-large enterprises (from hundreds to thousands of computers) that will be able to sustain frequent infrastructure failures and will reduce delays associated with making access control decisions. The proposed research will investigate an approach to increasing reliability and efficiency of enterprise-scale authorization solutions by flooding delivery channels with speculatively pre-computed authorizations and actively recycling them on a just-in-time basis.