Security engineering for large-scale distributed software applications

安全性是Internet和企业分布式软件应用程序的基本特征和首要关注点。然而，商业和政府组织对安全分布式应用程序的采用受到过高的拥有成本和无法支持实际应用程序和基础设施的严重阻碍。我研究的总体目标是探索为大规模分布式应用程序设计和管理安全机制的新方法。具体来说，我将研究大中型企业（从数百台到数千台计算机）的新授权架构，这些架构将能够承受频繁的基础设施故障，并减少与制定访问控制决策相关的延迟。拟议的研究将调查一种提高企业级授权解决方案的可靠性和效率的方法，方法是在交付渠道中大量使用推测性的预先计算的授权，并在及时的基础上积极地回收它们。

Security is an essential feature and foremost concern to Internet and enterprise distributed software applications. However, the adoption of secure distributed applications by commercial and government organizations is considerably hampered by the prohibitively high cost of ownership and the inability to support real-world applications and infrastructures. The general goal of my research is to explore new methods for designing and managing security mechanisms for large-scale distributed applications. Specifically, I will investigate new authorization architectures for medium-to-large enterprises (from hundreds to thousands of computers) that will be able to sustain frequent infrastructure failures and will reduce delays associated with making access control decisions. The proposed research will investigate an approach to increasing reliability and efficiency of enterprise-scale authorization solutions by flooding delivery channels with speculatively pre-computed authorizations and actively recycling them on a just-in-time basis.