Dynamic Security Policies

动态安全策略stephan A. zdancewicc本研究集中于动态安全策略的理论基础和实现——安全策略描述了计算机系统在系统构建时未知的环境中应如何处理机密或高完整性数据。关键思想是扩展易于理解的静态类型系统，这些系统使用动态机制来表达信息流安全策略，动态机制捕获仅在运行时可用的安全策略信息。这些策略对于设计能够应对环境变化的安全系统非常重要，并且可以随着时间的推移而发展。主要目标是：(1)为安全类型语言设计类型系统和伴随的可靠性证明，其中包括一级主体、身份验证、一级机密标签，以及在运行时构造和检查这些策略组件的机制。这项工作的一部分是扩展先前关于降级的研究。(2)在Jif编译器（一种基于Java的安全类型语言）中实现这些思想。(3)通过开发一套程序对实施进行压力测试来验证该方法。这些程序中的大多数将是测试角落用例的小型基准，但目的是让学生开发更大的应用程序。

CCR-0311204Dynamic Security PoliciesStephan A. ZdancewicThis research concentrates on the theoretical foundations and implementation of dynamic security policies--security policies that describe how confidential or high integrity data should be handled by computer systems in an environment that is unknown when the system is built. The key idea is to extend well understood static type systems that express information-flow security policies with dynamic mechanisms that capture security policy information available only at run time. Such policies are important to the design of secure systems that can cope with change in the environment and that can evolve over time.The main objectives are: (1) To design a type system and an accompanying soundness proof for a security-typed language that includes first-class principals, authentication, first-class confidentiality labels, and mechanisms to construct and inspect these policy components at run time. Part of this work is to extend previous research on downgrading. (2) To implement these ideas in the Jif compiler, a security-typed language based on Java. (3) To validate the approach by developing a suite of programs that stress-test the implementation. Most of these programs will be small benchmarks that test corner cases, but the intent is to have students develop larger applications.