Practical Language-Based Security, From The Ground Up

提出了一种综合的安全体系结构，它使用基于语言的机制来消除由于规避类型安全而导致的错误，无论这些错误是故意的还是错误的，并另外使用安全策略机制来遏制恶意行为。该方法扩展了先前应用于移动代码的技术，并且基于a)在任何软件运行之前机械地验证在任何软件中不存在此类错误，使用可首先检查此类错误或首先排除错误的代码表示，以及b)监视执行软件的恶意活动。解决方案的关键是提供一个类型化硬件抽象层(THAL)，该抽象层能够“从头开始”构建类型安全的系统，一直到防篡改的硬件。因此，我们的目标是建立一个实用的系统，我们可以在这个系统上从硬件上保证安全，而不仅仅是从操作系统上。

A comprehensive security architecture is proposed that uses language-based mechanisms to eliminate errors due to circumvention of type safety, be they intentional or erroneous, and that additionally uses security policy mechanisms to contain malicious behavior. This approach extends techniques previously applied to mobile code and is based on a combination of a) mechanically verifying the absence of such errors in any software before it is run, using code representations that can be checked for such errors or that rule out errors in the first place, and b) monitoring executing software for malicious activity.The proposed system consists of multiple layers, each of which is secured by the layer below it, the lowest of which can be provided in tamper-resistant hardware. Key to the solution is to provide a typed hardware abstraction layer (THAL) that enables the construction of a type-safe system "from the ground up", all the way down to the tamper-proof hardware. Hence, the goal is to build a practical system about which we can make security guarantees from the hardware up, and not just "from the operating system up".