Collaborative Research: CT-T: Flexible, Decentralized Information-flow Control for Dynamic Environments

Zdancewic，史蒂芬宾夕法尼亚大学与0524010,0524132,0524036非主导协作在参与者具有不同信任关系的动态分布式环境中保护机密信息是一项重要而困难的挑战。一个重要的问题是，随着策略和系统本身随着时间的推移而发展，如何以实际的方式一致地实施安全约束。如果不小心，查看不一致的策略更新可能会允许主体执行旧策略授予的操作，或者更糟糕的是，可能允许主体发布信息或执行新策略或旧策略授权的操作，而不是旧策略和新策略的非法组合。拟议研究的目标是开发、实施和评估安全基础设施，以便在策略可能发生变化的动态环境中提供强大的端到端安全保证。研究人员将探索用于管理信息流的安全类型编程语言、用于揭示主体、程序和策略之间的依赖关系的分析以及用于协调策略更新的分布式协议的最新综合。为了激励和验证设计决策，该基础设施将被合并到编程语言Cyclone中，这是C的一个类型安全变体，并用于构建和评估分布式文件系统。

ABSTRACT0524035Zdancewic, StephanUniversity of PennsylvaniaNon-Lead Collaborative with 0524010, 0524132, 0524036Protecting confidential information in dynamic, distributed environments whose participants have heterogeneous trust relationships is an important and difficult challenge. An important problem is how to consistently enforce security constraints in a practical manner as policies and the systems themselves evolve over time. Without care, inconsistently-viewed updates to policy could allow a principal toperform actions granted by an old policy, or worse, could allow a principal to release information or perform actions authorized by neither an old nor a new policy, but rather an illegal combination of the two.The objective of the proposed research is to develop, implement, and evaluate security infrastructure for providing strong end-to-end security guarantees in dynamic environments where policy can change. The researchers will explore a novel synthesis of the state-of-the-art in security-typed programming languages for governing information flow; analysis for uncovering dependencies between principals, programs, and policies; and distributed protocols for coordinating policy updates. To motivate and validate the design decisions, this infrastructure will be incorporated into the programming language Cyclone, a type-safe variant of C, and used to build and evaluate distributed file system.