Integrating Security and Fault Tolerance in Distributed Systems

提案编号：NSF-0430161TITLE：在分布式系统中集成安全和容错PI：Andrew C.Myers，Ken Bman，Fred B.SchneiderTrustworth分布式系统应该容忍恶意攻击和良性故障，同时保持数据的完整性和机密性。这项研究的目的是提出一种方法来构建总体上可信的分布式系统，即使系统中的一些节点已经被恶意攻击者破坏。安全和容错界已经为这些问题的某些方面制定了自己的解决方案，但这些解决方案是不兼容的。这个项目的目标是调和这种不兼容性。一个关键的想法是使用自动编译时转换来重写程序以安全运行，即使在一些主机不值得信任的情况下也是如此。代码和数据被转换为合成分布式系统，这些系统通过构建提供机密性、完整性和可用性。计划中的研究还包括使这些转换有效所需的新的分布式计算技术。这些技术包括主动恢复、主动混淆和阈值加密，它们可以帮助系统在恶意入侵和拒绝服务攻击中幸存下来，同时为机密提供数据完整性、高可用性和加密保护。基于流言和流行病的通信算法可以在大型分布式系统上提供健壮、可扩展和高效的信息聚合。总而言之，该计划是将新的编译时和运行时技术相结合，以使分布式系统更可靠。

Proposal Number: NSF-0430161TITLE: Integrating Security and Fault Tolerance in Distributed SystemsPI: Andrew C. Myers, Ken Birman, Fred B. SchneiderTrustworthy distributed systems should tolerate both malicious attacks and benign faults while preserving data integrity and confidentiality. This research aims to produce methods for constructing distributed systems that are trustworthy in the aggregate, even when some nodes in the system have been compromised by malicious attackers. The security and fault-tolerance communities have developed their own solutions to aspects of these problems, but the solutions are incompatible. The goal of this project is to reconcile that incompatibility. One key idea is to use automatic compile-time transformations to rewrite programs to run securely, even when some host machines are untrustworthy. Code and data are transformed to synthesize distributed systems that, by construction, provide confidentiality, integrity, and availability. The planned research also includes new distributed computation techniques needed to make these transformations effective. These techniques include proactive recovery, proactive obfuscation, and threshold cryptography, which can help systems survive malicious intrusions and denial of service attacks while offering data integrity, high availability, and cryptographic protection for secrets. Gossip-based and epidemic communication algorithms can provide robust, scalable, and efficient information aggregration over a large distributed system. In summary, the plan is to combine new compile-time and run-time techniques to make distributed systems more trustworthy.