This $300,000 project grant from the National Science Foundation's Computer and Information Science and Engineering program (CFDA 47.070) will fund research at Carnegie Mellon University from May 2022 to April 2026 to develop foundations for end-to-end verified secure sandboxed systems. The researchers will design novel type systems and formal foundations to characterize confidentiality, integrity, and availability requirements for securely sandboxing third-party code. They will develop techniques for sandbox boundary invariants, automatically generate secure boundary code, and formalize the semantics of context switching and system interfaces. The work aims to yield innovations in secure sandboxing frameworks that empower developers to build large-scale systems securely using open source and third-party code without absorbing security risks.
Generated 1/7/24, 3:58 AM