Collaborative Research: CT-T: Flexible, Decentralized Information-flow Control for Dynamic Environments

【摘要】hicks， Michael w .马里兰大学-学院ParkNon-Lead协作在参与者具有异构信任关系的动态分布式环境中保护机密信息是一项重要而艰巨的挑战。一个重要的问题是，随着策略和系统本身的发展，如何以实用的方式一致地实施安全约束。如果不小心，不一致查看的策略更新可能允许主体执行旧策略授予的操作，或者更糟的是，可能允许主体发布信息或执行既不是旧策略也不是新策略授权的操作，而是两者的非法组合。本研究的目标是开发、实现和评估安全基础设施，以便在策略可能发生变化的动态环境中提供强大的端到端安全保证。研究人员将探索最先进的安全类型编程语言的新综合，以控制信息流；分析揭示主体、程序和策略之间的依赖关系；以及用于协调策略更新的分布式协议。为了激励和验证设计决策，该基础结构将被合并到编程语言Cyclone （C的类型安全变体）中，并用于构建和评估分布式文件系统。

ABSTRACT0524036Hicks, Michael W.University of Maryland - College ParkNon-Lead Collaborative with 0524010, 0524132, 0524035Protecting confidential information in dynamic, distributed environments whose participants have heterogeneous trust relationships is an important and difficult challenge. An important problem is how to consistently enforce security constraints in a practical manner as policies and the systems themselves evolve over time. Without care, inconsistently-viewed updates to policy could allow a principal toperform actions granted by an old policy, or worse, could allow a principal to release information or perform actions authorized by neither an old nor a new policy, but rather an illegal combination of the two.The objective of the proposed research is to develop, implement, and evaluate security infrastructure for providing strong end-to-end security guarantees in dynamic environments where policy can change. The researchers will explore a novel synthesis of the state-of-the-art in security-typed programming languages for governing information flow; analysis for uncovering dependencies between principals, programs, and policies; and distributed protocols for coordinating policy updates. To motivate and validate the design decisions, this infrastructure will be incorporated into the programming language Cyclone, a type-safe variant of C, and used to build and evaluate distributed file system.