CAREER: Practical, Expressive, Language-based Information Security

基于语言的安全性（使用编程语言抽象和安全性技术）保证了有效实施强大的、正式的、细粒度的、特定于应用程序的信息安全保证。然而，基于语言的安全还没有发挥出它的潜力，没有得到广泛的应用，无法提供丰富的信息安全保障。这项研究使得基于语言的安全技术更加实用，从而有助于提高新的和现有计算机系统的信息安全性。它通过三种互补的方法来实现这一目标。首先，该项目开发了使信息安全保证与程序员的工作成比例的技术，这既降低了获得正式信息安全保证的入门成本，又允许程序的增量改进。Äôs安全保证，在资源和需求允许的情况下。其次，该项目开发了新的方法来表达和推理丰富的信息安全需求，例如信息发布、可用性需求、审计日志的生成和匿名需求。第三，通过探索与新开发的并发语言机制的协同作用来解决并发设置中的信息安全问题。这些探索产生的技术和机制将被整合到一种新的编程语言中，帮助程序员构建具有正式的、细粒度的、特定于应用程序的信息安全保证的计算机系统。

Language-based security (the use of programming language abstractions and techniques for security) holds the promise of efficient enforcement of strong, formal, fine-grained, application-specific information security guarantees. However, language-based security has not yet reached its potential, and is not in widespread use for providing rich information security guarantees.This research makes language-based security techniques more practical, and thus helps improve the information security of new and existing computer systems. It does so through three complementary approaches.First, this project develops techniques to make information security guarantees proportional to programmer effort, which both reduces the cost of entry for attaining formal information security guarantees, and allows incremental improvement of a program?Äôs security guarantees, as resources and requirements allow. Second, this project develops new ways to express and reason about rich information-security requirements, such as the required release of information, availability requirements, production of audit logs, and anonymity requirements. Third, information security in concurrent settings is addressed by exploring synergies with newly developed concurrent language mechanisms.Techniques and mechanisms resulting from these explorations will be incorporated into a new programming language that helps programmers build computer systems with formal, fine-grained, application-specific information security guarantees.