Show simple item record

dc.contributor.advisorBarbara Liskov
dc.contributor.authorCheng, Winnie Wing-Yeeen_US
dc.contributor.otherProgramming Methodologyen_US
dc.date.accessioned2009-08-27T22:00:05Z
dc.date.available2009-08-27T22:00:05Z
dc.date.issued2009-08-27
dc.identifier.urihttp://hdl.handle.net/1721.1/46700
dc.descriptionPhD thesisen_US
dc.description.abstractPrivate and confidential information is increasingly stored online and increasingly being exposed due to human errors as well as malicious attacks. Information leaks threaten confidentiality, lead to lawsuits, damage enterprise reputations, and cost billion of dollars. While distributed computing architectures provide data and service integration, they also create information flow control problems due to the interaction complexity among service providers. A main problem is the lack of an appropriate programming model to capture expected information flow behaviors in these large distributed software infrastructures. This research tackles this problem by proposing a programming methodology and enforcement platform for application developers to protect and share their sensitive data. We introduce Aeolus, a new platform intended to make it easier to build distributed applications that avoid the unauthorized release of information. The Aeolus security model is based on information flow control but differs from previous work in ways that we believe make it easier to use and understand. In addition, Aeolus provides a number of new mechanisms (anonymous closures, compound tags, boxes, and shared volatile state) to ease the job of writing applications. This thesis provides examples to show how Aeolus features support secure distributed applications. It describes the system design issues and solutions in designing a prototype implementation and presents performance results that show our platform has low overhead.en_US
dc.format.extent177 p.en_US
dc.relation.ispartofseriesMIT-CSAIL-TR-2009-040
dc.subjectprivacyen_US
dc.subjectsecurityen_US
dc.subjectdistributed systemsen_US
dc.subjectinformation flow controlen_US
dc.subjectintegrityen_US
dc.subjectsecrecyen_US
dc.subjectconfidentialityen_US
dc.titleInformation Flow for Secure Distributed Applicationsen_US
dc.typeThesisen_US
dc.contributor.departmentMassachusetts Institute of Technology, Dept. of Electrical Engineering and Computer Scienceen_US


Files in this item

Thumbnail
Thumbnail

This item appears in the following Collection(s)

Show simple item record