Policy-Induced Computer Science Problems? Background for NYU Public Design Workshop Fred B. Schneider Department of Computer Science Cornell University Ithaca, New York U.S.A.

1 Recent Research Example What security policies enforceable by monitoring? yAlice may read file HW3SolnSet. yAlice may read file HW3SolnSet only after submitting file HW3Soln. –Mathematical characterization possible. yAccess control: YES yInformation flow: NO –It suggests new implementation techniques. yImplement complete mediation Old approach: OS provided reference monitors New approach: in-lining checks into target

2 Policy-Driven Science: Electronic IP Protection Proposal: Require tamper-proof hardware on every digital device. Security community: Bad idea (but anything less would enable encrypted content to be freely copied). RIAA sues KaZaa et al: Asserts p2p system implementors could build systems that prevent illegal copying of music files. Currently p2p systems enable copyright infringement. Scientific Question: What can be achieved without adding hardware to existing systems? At what cost?

3 Policy-Driven Science: “Secure” Systems TCPA Proposal: Hardware + software that prevents policy from being circumvented on a PC. (Policy itself is left unspecified). yProtects against viruses and other malware. yEnables new business (e.g., pay per view for IP). yProbably blocks “fair-use” copying. Scientific Question: Must any scheme strong enough for IP copy protection also limit “fair use” copying.

4 Policy-Driven Science: Summary l Technological revolutions redefine legal and economic realities. l Two activities might sensibly follow: –Changes to laws (and perhaps to society’s underlying values). –Understanding whether change in laws and/or in values is really needed. Can technology adjust? yIntellectual Property (copyright) yPrivacy (anonymity) yJurisdiction