SaTC: CORE: Medium: WebSheets: A New Privacy-Centric Framework for Web Applications

电子表格的成功源于普通用户能够在不需要传统编程技能的情况下以表格格式创建应用程序。该项目开发了一种名为WebSheets的新型电子表格，用于开发以隐私为中心的web应用程序。WebSheets用户只需要掌握与传统电子表格用户相当的技能，就可以开发以组织和交互敏感表格数据为中心的web应用程序。主要成果将包括WebSheet公式语言和编译器，该语言的安全有效的评估引擎，以及新的分析和学习技术，以帮助用户理解和改进策略并调试策略错误。WebSheets解决了保护当今web应用程序的许多关键智力挑战。随着针对低级漏洞（例如SQL注入）的防御被更广泛地部署，攻击者的目标是高级错误，例如缺失或不正确的访问策略及其实施。这些攻击之所以有效，是因为今天的数据所有者无法直接表达他们想要的策略。此外，确保正确放置所有必要的安全检查是一个难题。最后，攻击者可能会利用实现漏洞来绕过策略。WebSheets通过在全球范围内执行数据所有者的隐私政策，并使用最小权限评估来限制漏洞造成的损害，从而解决了这些挑战。数据隐私和安全是当今社会面临的重要问题。本计划为资料拥有人提供技术基础，以控制机构及/或个人资料的使用和传播。项目结果将通过主办在http://seclab.cs.stonybrook.edu/This上的出版物和开源软件传播，奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The success of spreadsheets stems from an average user's ability to create applications in a tabular format without needing traditional programming skills. This project develops a novel formulation of spreadsheets called WebSheets for developing privacy-centric web applications. A WebSheets user need only master a skill set comparable to a conventional spreadsheet user in order to develop web applications centered around organizing and interacting with sensitive, tabular data. Key outcomes will include a WebSheet formula language and compiler, a secure and efficient evaluation engine for this language, and novel analysis and learning techniques to help users understand and improve policies and debug policy errors.WebSheets addresses many key intellectual challenges in securing today's web applications. As defenses against lower-level vulnerabilities (e.g., SQL injection) are more widely deployed, attackers target higher-level errors such as missing or incorrect access policies and their enforcement. These attacks are effective because today's data owners cannot directly express their desired policies. Moreover, ensuring the correct placement of all necessary security checks is a hard problem. Finally, implementation vulnerabilities may be exploited by attackers to bypass policies. WebSheets addresses these challenges by globally enforcing data owners' privacy policies, and using least-privilege evaluation to bound damage from vulnerabilities. Data privacy and security are important problems facing the society. This project provides a technical basis for data owners to gain control over the use and dissemination of institutional and/or personal data. Project results will be disseminated via publications and open-source software hosted at http://seclab.cs.stonybrook.edu/This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.