验证计算机安全方法:对抗科学的元方法
Validating Computer Security Methods: Meta-methodology for an Adversarial Science
摘要:
我们如何证明我们的计算机安全方法的有效性?这个元方法论问题与最近对计算机安全科学的探索有关,这些探索受到计算机安全独特属性的阻碍。我们通过开发属性和方法的分类来面对这个问题。跨学科的基础为一系列基本概念提供了坚实的基础,包括描述对抗性互动的决策树。针对技术方法描述了几种类型的失效和解决它们的一般方法。一个来自理论的跨学科论点解释了元方法验证在计算机安全对抗科学中的作用。
英文摘要:
How can we justify the validity of our computer security methods? This meta-methodological question is related to recent explorations on the science of computer security, which have been hindered by computer security's unique properties. We confront this by developing a taxonomy of properties and methods. Interdisciplinary foundations provide a solid grounding for a set of essential concepts, including a decision tree for characterizing adversarial interaction. Several types of invalidation and general ways of addressing them are described for technical methods. An interdisciplinary argument from theory explains the role that meta-methodological validation plays in the adversarial science of computer security.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。