Integrating Security and Fault Tolerance in Distributed Systems

提案编号：NSF-0430161标题：分布式系统中的安全和容错集成PI：Andrew C.放大图片作者：Ken Birman，Fred B.值得信赖的分布式系统应该容忍恶意攻击和良性故障，同时保持数据的完整性和机密性。这项研究的目的是产生的方法，用于构建分布式系统，是值得信赖的聚合，即使在系统中的一些节点已被恶意攻击者。安全和容错社区已经开发了他们自己的解决方案来解决这些问题，但是这些解决方案是不兼容的。 这个项目的目标是调和这种不相容性。 一个关键的想法是使用自动编译时转换来重写程序以安全地运行，即使某些主机不值得信任。 代码和数据被转换为综合分布式系统，通过构造，提供机密性、完整性和可用性。计划中的研究还包括使这些转换有效所需的新的分布式计算技术。 这些技术包括主动恢复、主动模糊处理和阈值加密，它们可以帮助系统抵御恶意入侵和拒绝服务攻击，同时提供数据完整性、高可用性和机密加密保护。 基于流言和流行病的通信算法可以在大型分布式系统上提供鲁棒的、可扩展的和有效的信息聚合。总之，该计划是将新的编译时和运行时技术联合收割机结合起来，使分布式系统更值得信赖。

Proposal Number: NSF-0430161TITLE: Integrating Security and Fault Tolerance in Distributed SystemsPI: Andrew C. Myers, Ken Birman, Fred B. SchneiderTrustworthy distributed systems should tolerate both malicious attacks and benign faults while preserving data integrity and confidentiality. This research aims to produce methods for constructing distributed systems that are trustworthy in the aggregate, even when some nodes in the system have been compromised by malicious attackers. The security and fault-tolerance communities have developed their own solutions to aspects of these problems, but the solutions are incompatible. The goal of this project is to reconcile that incompatibility. One key idea is to use automatic compile-time transformations to rewrite programs to run securely, even when some host machines are untrustworthy. Code and data are transformed to synthesize distributed systems that, by construction, provide confidentiality, integrity, and availability. The planned research also includes new distributed computation techniques needed to make these transformations effective. These techniques include proactive recovery, proactive obfuscation, and threshold cryptography, which can help systems survive malicious intrusions and denial of service attacks while offering data integrity, high availability, and cryptographic protection for secrets. Gossip-based and epidemic communication algorithms can provide robust, scalable, and efficient information aggregration over a large distributed system. In summary, the plan is to combine new compile-time and run-time techniques to make distributed systems more trustworthy.