ITR: Mechanisms for Securing Emerging Applications

随着计算机在家庭和社区中的普及，将出现新的应用程序，这些应用程序将通过自动化或辅助各种人类活动来使日常生活变得更容易。Suchaplications将是信息丰富的，它们将创建和处理有关其用户的活动以及他们生活和工作的环境的敏感信息。佐治亚理工学院已经建造了一个信息丰富的“感知之家”，以探索许多这样的应用。显然，如果要成功部署这些应用程序，确保它们的安全是很重要的。该项目将开展一系列研究活动，以确保未来的应用程序。其中包括针对此类应用程序的新安全策略，以及直观灵活的访问控制模型。还将研究各种自动用户识别技术，以认证请求的来源，而不需要提出请求的用户繁重的参与。将为从外部来源获取的信息制定新的完整性概念。授权、认证和完整性机制将用于为新兴应用程序构建安全服务。将探索使用形式化模型来研究新的安全策略和访问控制模型的重要属性。

As computers become pervasive in the home and community, new applicationswill emerge that will make daily living easier by automating or assisting in a variety of human activities. Suchapplications will be information rich and they will create and manipulatesensitive information about the activities of their users, and the environment in which they live and work. At the Georgia Institute of Technology, an information rich "Aware Home'' hasbeen built to explore many such applications. Clearly, it is importantthat such applications be secured if they are to be deployed successfully.This project will undertake a range of research activities tosecure future applications. These include new security policies for such applications, and intuitive and flexible access control models. A variety of automatic user identification techniques will also be investigated to authenticate sourcesof requests without requiring burdensome participation from the users making the requests. New notions of integrity for information accessed from outside sources will be developed. The authorization, authentication and integrity mechanisms will be used to build security servicesfor emerging applications. The use of formal models will be explored to study important properties of the new security policies and access control models.