Grant: Discovery Grants Program - Individual
University of Regina
$25,700.00
Programming abstractions for access control: capability, delegation, obligation
FY 2007-08
Summary
Software systems in the Internet era carry out computation on behalf of multiple principals. Mobile code, scriptable applications and plug-in architectures all involve the execution of untrusted program fragments alongside trusted ones. More than ever, we find within a single process multiple code units that are mutually suspicious of one another. In layman's language, the left hand does not trust the right. There is thus an increasing demand for programming environments to assume the security posture of a multiprogramming operating system, providing protection mechanisms that arbitrate the interaction of code units within a single application. The advent of the Java platform and the .Net framework is concrete evidence of thistrend.This proposal describes my plan to develop novel and practical programming language abstractions for exercising access control at the programming language level, with the objective of addressing the unique security challenges presented by dynamically extensible systems.
Program
Discovery Grants Program - Individual
Recipient
Location
Saskatchewan, Canada
Recipient Type
Academia
Type
Grant
Source
NSERC's Awards Data
As published
Application id
288328-2007
Name nom
Fong, Philip
Department département
Computer Science
Organization id
17
Institution établissement
University of Regina
Province en
Saskatchewan
Province fr
Saskatchewan
Country en
CANADA
Country fr
CANADA
Fiscal year exercice financier
2007
Competition year année de concours
2007
Award amount
25700
Program id
RGPIN
Program name en
Discovery Grants Program - Individual
Program name fr
Programme de subventions à la découverte - individuelles
Group en
Discovery grants programs
Group fr
Programmes de subventions à la découverte
Committee code
330
Committee name en
Computing and Information Sciences - A
Committee name fr
Informatique - A
Area of application code
801
Area of application group en
Information and communication services
Area of application group fr
Services d'information et de télécommunications
Area of application en
Computer software
Area of application fr
Logiciel
Research subject code
2705
Research subject group en
Information technology
Research subject group fr
Technologie de l'information
Research subject en
Software and development
Research subject fr
Logiciels et développement
Partie
1
Nb partie
5
Application title
Programming abstractions for access control: capability, delegation, obligation
Keyword
NA
Application summary
Software systems in the Internet era carry out computation on behalf of multiple principals. Mobile code, scriptable applications and plug-in architectures all involve the execution of untrusted program fragments alongside trusted ones. More than ever, we find within a single process multiple code units that are mutually suspicious of one another. In layman's language, the left hand does not trust the right. There is thus an increasing demand for programming environments to assume the security posture of a multiprogramming operating system, providing protection mechanisms that arbitrate the interaction of code units within a single application. The advent of the Java platform and the .Net framework is concrete evidence of thistrend.This proposal describes my plan to develop novel and practical programming language abstractions for exercising access control at the programming language level, with the objective of addressing the unique security challenges presented by dynamically extensible systems.
