ITR: Intelligent Networks for Resilient Web Services

由于缺乏中央管理机构，由来自多个管理域的组件组成的分布式应用程序对可伸缩性和可用性构成了挑战。该项目在Web服务体系结构的背景下调查客户端和服务之间的网络路径上的应用程序级智能是否有助于应对这些挑战。智能体现在模块中，用于检查客户端流量，做出有关服务操作的决策，如复制、请求重定向或准入控制，并最终实现这些操作。该项目结合了用于在中间路由节点执行服务特定操作的系统架构和用于为更靠近网络边缘的客户请求提供服务的应用中立算法。该体系结构和算法都使用语义框架，该框架将服务请求视为对(物理或虚拟)数据库的结构化访问。该活动的智力优势包括(1)开发新的技术和算法来自动扩展基于组件的服务以响应不利的客户端和网络工作负载条件；以及(2)针对接近网络边缘的客户端请求安全和高效地实现服务特定操作的体系结构的研究。该活动的广泛影响包括(1)提高国家网络基础设施对恶意攻击的弹性的技术；以及(2)将研究结果整合到本科课程中，该课程将培训学生构建基于组件的分布式系统。

Distributed applications comprising components from multipleadministrative domains, pose scalability and availability challengesbecause of the lack of a central administrative authority. Thisproject investigates, in the context of the Web Services architecture,whether application-level intelligence on the network path betweenclients and services can help address these challenges. Theintelligence is embodied in modules for inspecting client traffic,making decisions about service actions such as replication, requestredirection, or admission control, and finally realizing theseactions. The project combines a system architecture for executingservice-specific actions at intermediate routing nodes withapplication-neutral algorithms for servicing client requests closer tothe network edge. Both the architecture and the algorithms work witha semantic framework, which treats service requests as structuredaccesses against a (physical or virtual) database.The intellectual merits of the activity include (1) development ofnovel techniques and algorithms for automatically scalingcomponent-based services in response to adverse client and networkload conditions; and (2) investigation of architectures for securelyand efficiently realizing service-specific actions on client requestscloser to the network edge.Broader impacts of the activity include (1) techniques for improvingthe resilience of the nation's cyber-infrastructure against maliciousattacks; and (2) integration of the research results into anundergraduate-level course that will train students to buildcomponent-based distributed systems.