CT-ISG: Trustworthy Network Eavesdropping and Countermeasures (TNEC)

摘要提案编号：0524047 PI： Blaze，Matthew Institution：University of Pennsylvania标题：可信网络窃听对策（TNEC）TNEC项目从窃听者的角度研究互联网流量拦截问题。 它研究了依赖网络来保证机密性是不明智的，这些特性是否可以反过来有效地阻止窃听。网络拦截通常被认为是一个敏感性问题--防止流量逃避。“另一方面，在TNEC中，重点是针对误导性噪音的选择性。 该项目引入了一个新的概念，称为“混淆”，即第二方或第三方将难以与目标流量区分开的人造噪音指向窃听者。 混淆具有新颖的属性，它不需要通信方的端到端合作，以实现窃听resistance.TNEC将正式混淆和研究特定的网络和窃听配置的敏感性混淆技术，导致工具的测量和量化的“保真度”截获的流量流，即使在存在积极的对策。 更广泛地说，该项目将检查网络架构是否加剧了混乱，可能导致网络本身就能抵抗窃听，而不需要端到端加密。

AbstractProposal Number: 0524047PI: Blaze, Matthew Institution: University of PennsylvaniaTitle: Trustworthy Network Eavesdropping & Countermeasures (TNEC)The TNEC project examines the problem of Internet traffic interception from the point of view of the eavesdropper. It investigates whether the very properties that make it unwise to depend on networks for confidentiality can be turned on their head to effectively frustrate eavesdropping.Network interception is usually framed as a problem of sensitivity -- preventing traffic "evasion." In TNEC, on the other hand, the focus is on selectivity against misleading noise. The project introduces a new concept, called "confusion," in which a second- or third- party directs artificial noise at the eavesdropper that is difficult to distinguish from targets' traffic. Confusion has the novel property that it does not require end-to-end cooperation by the communicating parties in order to achieve eavesdropping resistance.TNEC will formalize confusion and study specific networks and eavesdropping configurations for susceptibility to confusion techniques, leading to tools for measuring and quantifying the "fidelity" of intercepted traffic streams even in the presence of active countermeasures. More broadly, the project will examine the network architectures for exacerbating confusion, possibly leading to networks that inherently resist eavesdropping without the need for end-to-end encryption.