CT-ISG: Designing Next-Generation, Reliable Internet Servers

NSF 0523243 CT-ISG：设计下一代可靠的互联网服务器尤金H. Spafford计算系统，尤其是关键服务器上的软件，正不断变得越来越复杂。 这些新增功能增加了复杂性，并增加了重大的持续漏洞。 在某种程度上，这可以追溯到设计决策，这些决策依赖于为新功能添加软件，而不是添加额外的硬件来支持更大的分离和增强的安全性。 IT硬件成本的下降表明，后一种方法可能对安全系统开发更具成本效益。本研究的重点是调查从简单的，独立的计算机系统的复杂的计算机服务器系统的建设。 这项工作将探索如何应用众所周知（但很少使用）的安全工程原则，结合新的设计功能，以产生高度安全的组件。 该研究还将制定指标，允许客观比较所产生的系统与更传统的架构的漏洞和好处。该项目的预期成果将是：1）验证或否定一些安全工程技术的价值; 2）一个服务器的演示原型，应该比更传统的系统更安全地抵御攻击; 3）一种设计用于测量服务器脆弱性的客观指标的方法; 4）使原型在教育环境中使用的材料。

NSF 0523243 CT-ISG: Designing Next-Generation, Reliable Internet Servers Eugene H. SpaffordComputing systems, and especially software on critical servers, are constantly becoming more complex. This addition of features has contributed to greater complexity and to the addition of significant, ongoing vulnerabilities. In part, this may be traced to design decisions that have depended upon adding software for new functions rather than adding additional hardware to support greater separation and enhanced security. The falling cost of IT hardware suggests that this latter approach may be more cost-effective for secure system development. The focus of this research is to investigate the construction of a complex computer server system from simpler, separate computer systems. The effort will explore how to apply well-known (but seldom used) security engineering principles coupled with newer design features to produce highly-secured components. The research will also develop metrics that will allow objective comparison of the vulnerabilities and benefits of the resultant system against more conventional architectures. The expected outcomes of this project will be: 1) validation or disproval of the value of a number of security engineering techniques; 2) a demonstration prototype of a server that should be more secure against attack than are more conventional systems; 3) an approach to designing objective metrics for measuring server vulnerabilities; 4) materials to enable use of the prototype in educational settings.