Byzantine Replication for Trustworthy Systems

提案编号：0430510TITLE：可信赖服务的拜占庭复制首席调查员：洛伦佐·阿尔维斯在一个经济学要求严格测试或验证很少组件的世界里，从不可信赖的组件构建可信赖系统的方法是必不可少的。管理构建值得信赖的分布式系统所固有的复杂性的一种有吸引力的方法是根据拜占庭故障模型将受危害的组件建模为有故障的组件-该模型是所有故障模型中最弱的，它允许有故障的组件任意且恶意地偏离其正确的规范。这项研究从基本假设和工程可行性两个方面探讨了这种方法的可行性。在第一方面，重点是(1)通过开发具有正式可验证的隐私保证的防火墙来结合容错和隐私的挑战，以及(2)在拜占庭容错体系结构中建立用于测量副本对安全攻击的故障独立性的坚实的、定量的基础。在第二方面，重点是探索实施拜占庭服务的新方法，这些服务提供低延迟、高吞吐量，并且可以快速且不引人注目地重新配置，以提高其性能，以响应它们所在环境的变化。成功地解决这些问题将使组装不可信组件以获得可信系统的策略成为可能。更广泛地说，拟议的研究将影响德克萨斯大学奥斯汀分校的研究生和本科生课程，并将有助于创建德克萨斯大学信息安全中心。

Proposal number: 0430510TITLE: Byzantine Replication for Trustworthy ServicesPrincipal Investigator: Lorenzo AlvisiIn a world where economics dictates that few components be rigorously tested or verified, methods for building trustworthy systems from untrustworthy components are essential. An attractive approach toward managing the complexity inherent in building trustworthy distributed systems consists in modeling a compromised component as faulty according to the Byzantine failure model---the weakest of all failure models, which allows faulty components to deviate arbitrarily and maliciously from their correct specification. This research explores the feasibility of this approach, both with respect to its fundamental assumptions and to its engineering viability. On the first front, the focus is on (1) the challenge of conjugating fault-tolerance and privacy by developing a firewall with formally verifiable privacy guarantees and (2) the establishment of a solid, quantitative basis for measuring failure independence of replicas against security attacks in Byzantine fault-tolerant architectures. On the second front, the emphasis is on exploring novel ways to implement Byzantine services that provide low latency, high throughput, and can be quickly and unobtrusively reconfigured to improve their performance in response to changes in the environment in which they operate. Addressing these issues successfully will enable a strategy for assembling untrustworthy components to obtain trustworthy systems. More broadly, the proposed research will impact both graduate and undergraduate curriculum at UT Austin and will contribute towards creating a UT Center for Information Security.