SAFE: A Declarative Trust-Agile System with Linked Credentials

Secure Access For Everyone (SAFE), is an integrated system for managing trust

using a logic-based declarative language. Logical trust systems authorize each

request by constructing a proof from a context---a set of authenticated logic

statements representing credentials and policies issued by various principals

in a networked system. A key barrier to practical use of logical trust systems

is the problem of managing proof contexts: identifying, validating, and

assembling the credentials and policies that are relevant to each trust

decision.

SAFE addresses this challenge by (i) proposing a distributed authenticated data

repository for storing the credentials and policies; (ii) introducing a

programmable credential discovery and assembly layer that generates the

appropriate tailored context for a given request. The authenticated data

repository is built upon a scalable key-value store with its contents named by

secure identifiers and certified by the issuing principal. The SAFE language

provides scripting primitives to generate and organize logic sets representing

credentials and policies, materialize the logic sets as certificates, and link

them to reflect delegation patterns in the application. The authorizer fetches

the logic sets on demand, then validates and caches them locally for further

use. Upon each request, the authorizer constructs the tailored proof context

and provides it to the SAFE inference for certified validation.

Delegation-driven credential linking with certified data distribution provides

flexible and dynamic policy control enabling security and trust infrastructure

to be agile, while addressing the perennial problems related to today's

certificate infrastructure: automated credential discovery, scalable

revocation, and issuing credentials without relying on centralized authority.

We envision SAFE as a new foundation for building secure network systems. We

used SAFE to build secure services based on case studies drawn from practice:

(i) a secure name service resolver similar to DNS that resolves a name across

multi-domain federated systems; (ii) a secure proxy shim to delegate access

control decisions in a key-value store; (iii) an authorization module for a

networked infrastructure-as-a-service system with a federated trust structure

(NSF GENI initiative); and (iv) a secure cooperative data analytics service

that adheres to individual secrecy constraints while disclosing the data. We

present empirical evaluation based on these case studies and demonstrate that

SAFE supports a wide range of applications with low overhead.

Editor's choice Regional trade agreements and export competitiveness: the uncertain path of Nicaragua’s apparel exports under CAFTA

The Central American Free Trade Agreement (CAFTA) has been a mixed blessing for economic development. While exports to the US economy have increased, dependency may hinder economic growth if countries do not diversify or upgrade before temporary provisions expire. This article evaluates the impact of the temporary Tariff Preference Levels (TPLs) granted to Nicaragua under CAFTA and the consequences of TPL expiration. Using trade statistics, country- and firm-level data from Nicaragua’s National Free Zones Commission (CNZF) and data from field research, we estimate Nicaragua’s apparel sector will contract as much as 30–40% after TPLs expire. Our analysis underscores how rules of origin and firm nationality affect where and how companies do business, and in so doing, often constrain sustainable export growth.

PoisonIvy: Safe speculation for secure memory

Encryption and integrity trees guard against phys- ical attacks, but harm performance. Prior academic work has speculated around the latency of integrity verification, but has done so in an insecure manner. No industrial implementations of secure processors have included speculation. This work presents PoisonIvy, a mechanism which speculatively uses data before its integrity has been verified while preserving security and closing address-based side-channels. PoisonIvy reduces per- formance overheads from 40% to 20% for memory intensive workloads and down to 1.8%, on average.

The HARPS-N Rocky Planet Search. I. HD 219134 b: A transiting rocky planet in a multi-planet system at 6.5 pc from the Sun

We know now from radial velocity surveys and transit space missions thatplanets only a few times more massive than our Earth are frequent aroundsolar-type stars. Fundamental questions about their formation history,physical properties, internal structure, and atmosphere composition are,however, still to be solved. We present here the detection of a systemof four low-mass planets around the bright (V = 5.5) and close-by (6.5pc) star HD 219134. This is the first result of the Rocky Planet Searchprogramme with HARPS-N on the Telescopio Nazionale Galileo in La Palma.The inner planet orbits the star in 3.0935 ± 0.0003 days, on aquasi-circular orbit with a semi-major axis of 0.0382 ± 0.0003AU. Spitzer observations allowed us to detect the transit of the planetin front of the star making HD 219134 b the nearest known transitingplanet to date. From the amplitude of the radial velocity variation(2.25 ± 0.22 ms-1) and observed depth of the transit(359 ± 38 ppm), the planet mass and radius are estimated to be4.36 ± 0.44 M⊕ and 1.606 ± 0.086R⊕, leading to a mean density of 5.76 ± 1.09 gcm-3, suggesting a rocky composition. One additional planetwith minimum-mass of 2.78 ± 0.65 M⊕ moves on aclose-in, quasi-circular orbit with a period of 6.767 ± 0.004days. The third planet in the system has a period of 46.66 ± 0.08days and a minimum-mass of 8.94 ± 1.13 M⊕, at0.233 ± 0.002 AU from the star. Its eccentricity is 0.46 ±0.11. The period of this planet is close to the rotational period of thestar estimated from variations of activity indicators (42.3 ± 0.1days). The planetary origin of the signal is, however, thepreferredsolution as no indication of variation at the corresponding frequency isobserved for activity-sensitive parameters. Finally, a fourth additionallonger-period planet of mass of 71 M⊕ orbits the starin 1842 days, on an eccentric orbit (e = 0.34 ± 0.17) at adistance of 2.56 AU.The photometric time series and radial velocities used in this work areavailable in electronic form at the CDS via anonymous ftp to http://cdsarc.u-strasbg.fr(ftp://130.79.128.5) or via http://cdsarc.u-strasbg.fr/viz-bin/qcat?J/A+A/584/A72

Shooting for the Moon or Flying Too Near the Sun? Crossing the Value Rubicon in Precision Cancer Care

In his last two State of the Union addresses, President Barack Obama has focused on the need to deliver innovative solutions to improve human health, through the Precision Medicine Initiative in 2015 and the recently announced Cancer Moonshot in 2016. Precision cancer care has delivered clear patient benefit, but even for high-impact medicines such as imatinib mesylate (Glivec) in chronic myeloid leukaemia, the excitement at the success of this practice-changing clinical intervention has been somewhat tempered by the escalating price of this 'poster child' for precision cancer medicine (PCM). Recent studies on the costs of cancer drugs have revealed significant price differentials, which are a major causative factor behind disparities in the access to new generations of immunological and molecularly targeted agents. In this perspective, we will discuss the benefits of PCM to modern cancer control, but also emphasise how increasing costs are rendering the current approaches to integrating the paradigm of PCM unsustainable. Despite the ever increasing pressure on cancer and health care budgets, innovation will and must continue. Value-based frameworks offer one of the most rational approaches for policymakers committed to improving cancer outcomes through a public health approach.