NGNI-Small: Declarative Secure Networked Information Systems

该项目的目标是开发一种用于指定、实现、分析和审计大型安全信息系统的声明性语言和系统。该项目统一了三个工作实体：基于逻辑的信任管理语言、用于说明性网络的数据库查询语言以及用于通过来源或血统概念分析数据计算的数据库技术。该项目的第一部分研究了安全网络数据日志(SeNDlog)语言的设计，该语言统一了声明性网络和基于逻辑的访问控制语言。开发了一个具有安全扩展的声明式网络系统，以执行SeNDlog程序来实现各种安全的网络信息系统。该项目的第二部分利用网络中的数据来源进行实时网络诊断和取证。该项目研究高效计算网络起源的优化技术，并分析跨网络协议、安全策略和分布式信息系统的统一框架中出现的机会。这项工作的更广泛影响是一个统一的可扩展平台，用于开发和分析下一代安全的以信息为中心的网络，包括经过身份验证的互联网规模的路由基础设施、可扩展的基于内容的网络和安全的分布式数据管理系统。创建了一门名为网络与数据库相遇的研究生课程，以探索这两个领域的交叉领域的协同主题，并从该项目中汲取实践经验和使用案例。这项研究的出版物、技术报告、软件和实验数据通过项目网站(http://www.cis.upenn.edu/~boonloo/decsec/).)传播

The goal of this project is to develop a declarative language and system for specifying, implementing, analyzing and auditing large-scale secure information systems. The project unifies three bodies of work: logic-based trust management languages, database query languages for declarative networks, and database techniques for analyzing data computations via the concept of provenance or lineage. The first part of the project investigates the design of the Secure Network Datalog (SeNDlog) language that unifies the declarative networking and logic-based access control languages. A declarative networking system with security extensions is developed to execute SeNDlog programs to implement a variety of secure networked information systems. The second part of the project applies the use of data provenance in networks for performing real-time network diagnostics and forensics. This project studies optimization techniques for computing network provenance efficiently, and analyzes opportunities presented in the unified framework across network protocols, security policies, and distributed information systems. The broader impact of this work is a unified extensible platform for developing and analyzing next-generation secure information-centric networks, including authenticated Internet-scale routing infrastructures, scalable content-based networks, and secure distributed data management systems. A graduate course titled Networking-meets-Databases is created to explore synergistic topics at the intersection of these two areas, drawing practical experiences and use cases from the project. Publications, technical reports, software and experimental data from this research aredisseminated via the project web site (http://www.cis.upenn.edu/~boonloo/decsec/).