Security engineering for large-scale distributed software applications

安全性是Internet和企业分布式软件应用程序的一个基本特征，也是最重要的问题。然而，高得令人望而却步的拥有成本以及无法支持真实世界的应用程序和基础设施，大大阻碍了商业和政府组织采用安全的分布式应用程序。我研究的总体目标是探索设计和管理大规模分布式应用程序的安全机制的新方法。具体地说，我将研究适用于大中型企业(从数百台到数千台计算机)的新授权体系结构，这些体系结构将能够承受频繁的基础设施故障，并将减少与访问控制决策相关的延迟。拟议的研究将调查一种提高企业规模授权解决方案可靠性和效率的方法，方法是用推测性预先计算的授权淹没交付渠道，并在及时的基础上积极回收它们。

Security is an essential feature and foremost concern to Internet and enterprise distributed software applications. However, the adoption of secure distributed applications by commercial and government organizations is considerably hampered by the prohibitively high cost of ownership and the inability to support real-world applications and infrastructures. The general goal of my research is to explore new methods for designing and managing security mechanisms for large-scale distributed applications. Specifically, I will investigate new authorization architectures for medium-to-large enterprises (from hundreds to thousands of computers) that will be able to sustain frequent infrastructure failures and will reduce delays associated with making access control decisions. The proposed research will investigate an approach to increasing reliability and efficiency of enterprise-scale authorization solutions by flooding delivery channels with speculatively pre-computed authorizations and actively recycling them on a just-in-time basis.