Collaborative Research: A Survivable Information Infrastructure for National Civilian BioDefense

标题：国家民用生物防御的可生存信息基础设施sepi: Rafail Ostrovsky本项目侧重于促进满足国家应急响应系统关键要求的可生存信息基础设施的理论基础和协议。具体而言，该项目将解决以下挑战：(1)扩展现有的理论框架，以分析恶意和串通参与者的行为；(2)设计和构建一个可扩展的可生存的消息传递系统，该系统在包括内部威胁和拒绝服务攻击在内的强对抗模型下正确运行；(3)设计和构建信息访问协议，防止数据库服务器提供错误数据或服务器拒绝合法用户访问；(4)防止恶意用户学习未经授权的信息。这项工作的应用领域是临床医生的生物防御网络（CBN），这是一个全国性的基于互联网的信息交换系统，旨在为临床医生提供生物恐怖袭击后的关键信息。CBN旨在减轻良性的互联网故障，并抵御一个地点的物理攻击。然而，它无法在包括内部攻击在内的更强大的威胁模型下正确运行。目前还没有针对这种更强威胁模型的解决方案，这是一个主要的研究挑战。本项目将构建一个基于CBN的可生存系统原型，并从中得出一般原理。它将发展一个坚实的理论基础和新的系统工具，以促进建立国家应急网络，在危机情况下，当这些网络最迫切需要的时候，能够抵御网络攻击。

Proposal Number: CNS-0430254TITLE: A Survivable Information Infrastructure for National Civilian BioDefensePI: Rafail Ostrovsky This project focuses on the theoretical foundation and the protocols that facilitate a survivable information infrastructure that meets the critical requirements of a national emergency response system. Specifically, the project will address the following challenges:(1) expand the existing theoretical framework to analyze the behavior of malicious and colluding participants; (2) design and construct a scalable survivable messaging system that operates correctly under a strong adversarial model that includes insider threat and denial of service attacks; (3) design and construct information access protocols that protect against compromised database servers providing incorrect data or servers that deny access to legitimate users; and (4) prevent malicious users from learning unauthorized information. The domain of application for this work is the Clinicians' Biodefense Network (CBN), a nationwide Internet-based information exchange system designed to provide clinicians with critical information in the aftermath of a bioterrorist attack. The CBN is designed to mitigate benign Internet faults and to resist a physical attack on one location. However, it is not able to correctly operate under a stronger threat model that includes insider attacks. Solutions for this stronger threat model are not currently available and present a major research challenge. This project will construct a prototype survivable system based on the CBN, and from it draw general principles. It will develop a solid theoretical foundation and novel system tools to facilitate building national emergency networks that are resilient against cyber-attacks in crisis situations, when those networks are most urgently needed.