Byzantine Replication for Trustworthy Systems

标题：可信服务的拜占庭复制主要研究者：Lorenzo alvisi在一个世界里，经济学决定了很少的组件被严格测试或验证，从不可信的组件构建可信系统的方法是必不可少的。管理构建可信分布式系统所固有的复杂性的一个有吸引力的方法是，根据拜占庭故障模型（所有故障模型中最弱的模型）将受损组件建模为故障组件，该模型允许有故障的组件任意和恶意地偏离其正确的规范。本研究从其基本假设和工程可行性两方面探讨了这种方法的可行性。在第一个方面，重点是：(1)通过开发具有正式可验证隐私保证的防火墙来结合容错和隐私的挑战；(2)在拜占庭式容错架构中建立可靠的定量基础，用于测量副本对安全攻击的故障独立性。在第二个方面，重点是探索实现拜占庭服务的新方法，这些服务提供低延迟、高吞吐量，并且可以快速、不显眼地重新配置，以提高其性能，以响应其运行环境的变化。成功地解决这些问题将实现一种策略，将不可信的组件组装在一起，以获得可信的系统。更广泛地说，拟议的研究将影响德克萨斯大学奥斯汀分校的研究生和本科课程，并将有助于创建德克萨斯大学信息安全中心。

Proposal number: 0430510TITLE: Byzantine Replication for Trustworthy ServicesPrincipal Investigator: Lorenzo AlvisiIn a world where economics dictates that few components be rigorously tested or verified, methods for building trustworthy systems from untrustworthy components are essential. An attractive approach toward managing the complexity inherent in building trustworthy distributed systems consists in modeling a compromised component as faulty according to the Byzantine failure model---the weakest of all failure models, which allows faulty components to deviate arbitrarily and maliciously from their correct specification. This research explores the feasibility of this approach, both with respect to its fundamental assumptions and to its engineering viability. On the first front, the focus is on (1) the challenge of conjugating fault-tolerance and privacy by developing a firewall with formally verifiable privacy guarantees and (2) the establishment of a solid, quantitative basis for measuring failure independence of replicas against security attacks in Byzantine fault-tolerant architectures. On the second front, the emphasis is on exploring novel ways to implement Byzantine services that provide low latency, high throughput, and can be quickly and unobtrusively reconfigured to improve their performance in response to changes in the environment in which they operate. Addressing these issues successfully will enable a strategy for assembling untrustworthy components to obtain trustworthy systems. More broadly, the proposed research will impact both graduate and undergraduate curriculum at UT Austin and will contribute towards creating a UT Center for Information Security.