Secure Software Execution System

我们已经开发了使用操作系统和系统软件技术，用于在开放网络环境中安全执行软件。我们总结了我们的主要研究课题如下：(1)处理程序攻击的技术再次防御攻击我们开发了一种技术，通过将软件与主机环境隔离来保护易受攻击的程序。攻击检测我们开发了一个入侵检测系统来监控软件，这样系统就可以检测出偏离规范的行为。我们的系统通过检查程序发出的系统调用来检测任何此类恶意行为。在软件被成功利用的情况下，我们开发了一种技术来限制软件拥有的特权，从而可以避免进一步的损害。从损坏中恢复我们的技术通过将机器恢复到以前的状态来从攻击造成的任何损坏中恢复。(2)网络的安全和隐私安全虚拟专用网目前的虚拟专用网（VPN）系统不存在对用户允许做什么的细粒度限制。在我们的研究中，我们试图解决这个问题。防火墙我们开发了一种实现高性能防火墙的技术。我们的技术改进了现有的以前的作品，能够检测未经授权的访问，而以前的作品不能。此外，我们的技术可以通过有效地检查内容来检测此类未经授权的访问，而不会造成重大的性能损失。访问服务器时匿名的实现我们开发了一种用户访问服务器时匿名的技术。这样可以保护用户的信息不被收集。

We have developed using operating systems and system software techniques for secure software execution in an open network environment. We summarize our main research topics as follows(1) Techniques for handling attacks on programs Defense again attacks We developed a technique for protecting programs that are vulnerable to attacks by isolating the software from the host environment. Detection of attacks We developed an intrusion detection system that monitors software such that the system can detect behaviors that deviate from the norm. Our system detects any such malicious behavior by examining system calls issued by the program. Minimization of damage In case the software is successfully exploited, we developed a technique to limit the privileges the software has, so that further damage can be avoided. Recovery from damage Our technology recovers from any damage caused by an attack by restoring the machine to a previous state.(2) Security and Privacy on Networks Secure Virtual Private Networks Fine-grained restrictions of what users are allowed to do are inexistent in current Virtual Private Network (VPN) systems. In our research, we attempt to solve this problem. Firewalls We developed a technology for realizing a high-performance firewall. Our technology improves on existing previous works by being able to detect unauthorized accesses that predecessors could not. Furthermore, our techniques can detect such unauthorized accesses without significant performance loss by examining the contents efficiently. Realization of Anonymity when accessing servers We developed a technology for anonymaing a user when accessing servers. This enables the protection of the user's information from being collected.