Descriptions and Negotiation Models of Security Policies

作为构建下一代安全信息基础设施的第一步，我们研究了以下三个领域，代表三个不同的观点：描述，用户和系统。灵活的安全策略描述方案及其实施机制考虑到互联网时代相互不信任的各方可能需要相互合作或进行交易，我们提出了一种新的安全策略模型，该模型与隐私保护相兼容。我们的研究成果包括一个基于贡献认证的策略协商模型、基于安全自动机的描述方案、一个带有插装的执行机制和一个带有部分评估的优化.安全软件系统的构造和操作的方便方法我们提出了由开发人员、操作员和最终用户进行的安全软件系统的（半）自动化构造和操作。我们的研究成果包括从包管理器信息中自动开发安全策略，半自动构造安全编译语言处理器，安全软件开发环境，包括可视化语言系统和调试器.下一代信息安全体系结构的基础我们提出了各种安全机制的计算系统利用大量的资源。我们的研究成果包括一个容错和高性能的通信库，一个可扩展的认证算法，一个远程安装和恢复工具的PC集群，虚拟机技术的虚拟组织之间的干扰的解决方案。

As a first step to building next generation secure information infrastructures, we have investigated the following three areas, representing three different viewpoints : descriptions, users, and systems.1. Flexible Security Policy Description Schemes and Their Enforcement Mechanisims Taking account that mutual ly untrusted parties may have to collaborate or do trade with one another in the Internet era, we propose a new model of security policy that is compatible with privacy protections. Our research results include a model of policy negotiation using at tribute authentications, description schemes based upon security automata, an enforcement mechanism with instrumentation, and optimization with partial evaluations.2. Convenient Methodologies for Constructions and Operations of Secure Software Systems We propose (semi-) automated construct ions and operations of secure software systems by developers, operators, and end-users. Our research results include automatic exploitations of security policies from information of package managers, semi-automated constructions of secure programuing language processors, development environments of secure software including a visual language system and a debugger.3. Foundations of Next Generation Information Infrastructures We propose various security mechanisms for computing systems utilizing massive resources. Our research results include a fault-tolerant and high performance communication library, a scalable authentication algorithm, a remote installation and recovery tool for PC clusters, a virtual machine technology for the resolution of interference among virtual organizations.