Collaborative Research: A Survivable Information Infrastructure for National Civilian BioDefense

提案编号：CNS-0430254标题：国家民用生物防御的生存信息基础设施PI：Rafail Ostrovsky该项目侧重于理论基础和协议，以促进满足国家应急响应系统的关键要求的生存信息基础设施。具体而言，该项目将解决以下挑战：（1）扩展现有的理论框架，以分析恶意和合谋参与者的行为;（2）设计和构建一个可扩展的可生存的消息传递系统，该系统在包括内部威胁和拒绝服务攻击的强对抗模型下正确运行;（三）设计和构建信息访问协议，以防止提供错误数据的受损数据库服务器或拒绝访问合法用户;（4）防止恶意用户学习未经授权的信息。 这项工作的应用领域是临床医生生物防御网络，这是一个全国性的因特网信息交流系统，旨在为临床医生提供生物恐怖袭击后的重要信息。CBN旨在缓解良性互联网故障，并抵御对一个位置的物理攻击。但是，它无法在包括内部攻击在内的更强威胁模型下正确运行。目前还没有针对这种更强威胁模型的解决方案，这是一个重大的研究挑战。 本计画将建构一个以CBN为基础的可生存系统原型，并从中归纳出一般原则。它将发展坚实的理论基础和新颖的系统工具，以促进建立国家应急网络，在危机情况下应对网络攻击，当这些网络是最迫切需要的。

Proposal Number: CNS-0430254TITLE: A Survivable Information Infrastructure for National Civilian BioDefensePI: Rafail Ostrovsky This project focuses on the theoretical foundation and the protocols that facilitate a survivable information infrastructure that meets the critical requirements of a national emergency response system. Specifically, the project will address the following challenges:(1) expand the existing theoretical framework to analyze the behavior of malicious and colluding participants; (2) design and construct a scalable survivable messaging system that operates correctly under a strong adversarial model that includes insider threat and denial of service attacks; (3) design and construct information access protocols that protect against compromised database servers providing incorrect data or servers that deny access to legitimate users; and (4) prevent malicious users from learning unauthorized information. The domain of application for this work is the Clinicians' Biodefense Network (CBN), a nationwide Internet-based information exchange system designed to provide clinicians with critical information in the aftermath of a bioterrorist attack. The CBN is designed to mitigate benign Internet faults and to resist a physical attack on one location. However, it is not able to correctly operate under a stronger threat model that includes insider attacks. Solutions for this stronger threat model are not currently available and present a major research challenge. This project will construct a prototype survivable system based on the CBN, and from it draw general principles. It will develop a solid theoretical foundation and novel system tools to facilitate building national emergency networks that are resilient against cyber-attacks in crisis situations, when those networks are most urgently needed.