EAGER: Accountability Through Architecture for Decentralized Systems

要提高创建可信计算系统的能力，需要在许多技术和许多抽象层次上取得根本性的进步。然而，创建值得信赖的应用程序需要的不仅仅是一组优秀的构建块。它需要建筑学的理解；它显示了一种以相互一致和支持的方式利用许多贡献的可行方法。该项目源于对通过创新软件体系结构实现安全性的关注，其中应用了新的技术组合，并构建了安全和责任的基本机制。特别是，预防、检测、隔离、减轻和责备等安全问题需要一种体系结构解决方案，其中系统责任是体系结构的结果，而不是一种选择。为此，建议提供了一种新的可选架构风格，COAST，用于构建安全的、大规模的、分散的系统，并结合了对能力核算的关注。能力是一种不可伪造的引用，它的拥有赋予主体权力和权利。能力会计是生产和维护与特定时期或目的有关的能力的产生、转移或使用的记录或报表的实践。该方法有助于细粒度地使用功能会计来防止安全问题、隔离安全问题、减轻问题的后果，并在必要时为后续操作的使用分配责任。目标应用程序以soa（面向服务的体系结构）为代表，例如在电子商务中发现的soa，其中有多个交互方，但没有单一的总体权威。我们的方法受到其他行业日常使用的广泛会计原则的启发和启发，特别是危害分析和关键控制点（HACCP），一种针对生产过程中危害的系统预防方法，以及金融和商业的公认会计原则（GAAP）。我们目前的重点是评估这种方法在概念物联网应用中的可行性，我们依靠仔细的测量和工程分析来指导未来更大规模的项目。

Advancing the ability to create trustworthy computing systems demands fundamental advances in many technologies and at many levels of abstraction. Creating trustworthy applications requires more than a set of excellent building blocks, however. It demands an architectural understanding; one that shows a viable approach to utilizing many contributions in mutually consistent and supportive ways. This project springs from a focus on achieving security through innovative software architecture, wherein novel combinations of technologies are applied and the essential mechanisms of security and accountability are built in. In particular, the security concerns of prevent, detect, isolate, mitigate, and blame demand an architectural solution wherein systemic accountability is an architectural consequence, rather than an option.To this end the proposal offers a novel alternative architectural style, COAST, for constructing secure, large-scale, decentralized systems, coupled with a focus on capability accounting. A capability is an unforgeable reference whose possession confers both authority and rights to a principal. Capability accounting is the practice of producing and maintaining a record or statement of the generation, transfer, or use of capability relating to a particular period or purpose. The approach facilitates the fine-grained use of capability accounting to prevent security problems, isolate them, mitigate consequences of problems, and, if necessary, assign blame for use in subsequent actions. Target applications are typified by SOAs (Service Oriented Architectures), such as those found in e-commerce, where there are multiple interacting parties but no single overarching authority. Our approach is inspired and informed by the daily use of broad accounting principles in other industries, notably Hazard Analysis and Critical Control Points (HACCP), a systematic preventive approach to hazards in production processes, and the generally accepted accounting principles (GAAP) of finance and business. Our immediate focus is assessing the viability of this approach in a notional Internet-of-Things application, where we rely on careful measurement and engineering analysis to guide future larger-scale projects.