CT-ER : Runtime Techniques for protecting confidential data in large scale software

随着越来越多的机密信息被计算机软件处理，确保个人信息的隐私性正成为一个极大的关注。 为了解决这个问题，本项目研究了跟踪软件程序处理的敏感数据的使用的机制，目的是防止未经授权的泄露。技术重点是跟踪敏感数据使用的运行时机制的使用。有三个主要领域调查在这个建议（a）机制为基础的进程分离和运行时检查执行机密性政策（B）技术擦除敏感数据从程序后，他们的预期用途和（c）技术跟踪implicitinformation流.该项目使用了基于PI的工作的新思想，这些工作是基于语言技术的，用于解决这些关键领域的基础研究问题。为了最大限度地发挥影响力，该项目还将实现将这些技术应用于大规模软件应用的工具。这些工具将使程序员和最终用户能够改进程序，以保护他们的机密数据。 这些工具将通过网络进行最广泛的传播和进一步的改进。在教育方面，该项目旨在培训研究生和本科生，使他们能够在计算机安全和隐私方面应用基于语言的方法进行研究。

With the increasing amount of confidential information being handledby computer software, ensuring privacy of personal information isbecoming a great concern. To address this concern, this projectinvestigates mechanisms that trackthe use of sensitive data handled by software programs with the goal ofpreventing unauthorized disclosure.The technical focus is on the use of runtime mechanisms that track theuse of sensitive data. There are three thrust areas investigated inthis proposal (a) mechanisms for process based separation andruntime checking for enforcing confidentiality policies(b) techniques for erasing sensitive data from programsafter their intended use and (c) techniques for tracking implicitinformation flows. The project uses novel ideas that build on the PI'sprior work in language based techniques for addressingfundamental research questions in these thrust areas.To maximize impact, this project will also implement toolsthat will apply these techniques to large scale softwareapplications. These tools will enable programmers and end usersto retrofit programs in order to safeguard theirconfidential data. These tools will be distributed using theWeb for the widest possible dissemination and further enhancement.With regards to education, this project aims to train both graduate andundergraduate students to perform research in the the application oflanguage based methods for computer security and privacy.