PCC技术的应用和改进

Application and Improvement of PCC

随着基于Ｉｎｔｅｒｎｅｔ的分布式计算的兴起，如何在确保系统安全的情况下有效地使用网络上的各种计算资源已成为计算机科学的研究热点之一．由Ｎｅｃｕｌａ和Ｌｅｅ提出的自带证明代码（ＰＣＣ）概念被认为是一种可行的技术，文中研究ＰＣＣ技术所涉及的技术问题，分析比较了ＰＣＣ和其他安全技术的适应性，指出了该技术的优点和限制，提出了相应的改进措施，探讨了其在远程高性能并行计算及可移动代码迁移系统中应用的可能性．

The advent of distributed computing based on internet have made the problem of untrusted foreign code security one of the exciting points of research in computer science. Proof Carry Code (PCC), a technology recently introduced by Necula and Lee, seems a rather ideal solution to this problem. The concept of PCC is very simple: have the code to prove itself, or in other words, a program should carry with itself a proof of its adherence to certain safety policies. This paper attempts to look into technical issues in PCC, compare PCC with other methods, study the advantages and limitations of PCC, and identify its potential application areas. The theory of programming languages, including type theory, logical framework, program verification and formal semantics, will provide a flexible approach to secure problems involved in WWW applications.