资 源 简 介
Policy-based computing is a critical component of many large-scale configurable systems because it enables dynamic adaptability of system behavior by changing policy configurations without reprogramming the systems. Policy evaluation, the process of checking whether a request satisfies a policy, is typically the performance bottleneck of policy-based systems. Most prior research has focused on the correctness (i.e., specification, design, and analysis) of policies. While correctness is an important issue, the adoption of policy-based computing may be limited if the resulting systems are not implemented efficiently and thus perform poorly.
The high-level research objective of this project is to increase the effectiveness and adoption of policy-based computing by designing high performance policy evaluation algorithms and engines that can be adapted to support various policy languages. The primary focus of this project is the fast evaluation of security policies, which are mos