NSF Workshop on Assurable and Usable Security Configuration

提案编号：0837871PI: Ehab Al-ShaerInstitution: DePaul UniversityLeadTitle: NSF可靠和可用的安全配置研讨会据估计，系统或网络级别的配置错误导致了65%的攻击，其中许多会产生严重的后果，因为通常配置错误的系统允许攻击者访问安全关键对象。本次研讨会的目标是提供一个讨论的场所，以消除或大大减少错误配置。超负荷工作的系统管理员或家庭用户需要配置他们的系统，这通常会导致系统配置严重错误。需要进行研究，以开发出能够大幅减少配置系统所需工作的工具，从而使系统不容易受到攻击。研究将涉及允许用户描述其安全和隐私需求的策略语言，将策略具体化为可执行规则的技术，以及支持对策略进行更改以反映对规则集的适当更改的新技术。该讲习班有工业界的参与，使学术参与者熟悉从实际企业和网络中汲取的政策和规则集。研讨会将产生一份详细的报告，并发布在美国国家科学基金会的网站上

Proposal Number: 0837871PI: Ehab Al-ShaerInstitution: DePaul UniversityLeadTitle: NSF Workshop on Assurable and Usable Security ConfigurationIt is estimated that configuration errors at the system or network level enable 65% of the attacks that have been seen, many of which have serious consequences because often a misconfigured system permits attackers to access security-critical objects. The objective of this workshop is to provide a venue for discussions to eliminate or drastically reduce misconfigurations. It falls on overworked system administrators or the home user to configure their systems, often resulting in seriously misconfigured systems. Research is needed to lead to tools that will drastically reduce the work required to configure systems so that they are not open to attack. The research will involve policy languages that permit users to characterize their security and privacy needs, techniques to reify policies to enforceable rules, and new techniques that support changes to a policy that reflect down to the appropriate changes to rule sets. The workshop involves the participation of industry so that the academic participants will become familiar with policies and rule sets drawn from real enterprises and networks. The workshop will produce a detailed report to be posted on the NSF web site