Using replication and partitioning to build secure distributed systems

Abstract

A challenging unsolved security problem is how to specify and enforce system-wide security policies; this problem is even more acute in distributed systems with mutual distrust. This paper describes a way to enforce policies for data confidentiality and integrity in such an environment. Programs annotated with security specifications are statically checked and then transformed by the compiler to run securely on a distributed system with untrusted hosts. The code and data of the computation are partitioned across the available hosts in accordance with the security specification. The key contribution is automatic replication of code and data to increase assurance of integrity-without harming confidentiality, and without placing undue trust in any host. The compiler automatically generates secure run-time protocols for communication among the replicated code partitions. Results are given from a prototype implementation applied to various distributed programs. This material is posted here with permission of the IEEE. Such permission of the IEEE does not in any way imply IEEE endorsement of any of the University of Pennsylvania's products or services. Internal or personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution must be obtained from the IEEE by writing to pubs-permissions@ieee.org. By choosing to view this document, you agree to all provisions of the copyright laws protecting it.

IEEE Security and Privacy Symposium in the Year 2003

“…Moving from policies, the next several papers addressed distributed systems and Internet-connected systems. In " Using Replication and Partitioning to Build Secure Distributed Systems," Zheng et al 6 developed an approach to hardening computations running across a large number of shared personal computers. The application of concern was the use of spare computing cycles (to create computing power akin to supercomputers) and methods for guaranteeing the integrity and accounting of those computations.…”