CT-ISG: Trustworthy Network Eavesdropping and Countermeasures (TNEC)

摘要提案编号：0524047PI: Blaze， Matthew机构：University of pennsylvania题目：可信网络窃听与对策（TNEC） TNEC项目从窃听者的角度研究互联网流量拦截问题。它调查的是，那些让依赖网络保密变得不明智的特性，是否可以反过来有效地挫败窃听。网络拦截通常被认为是一个敏感性问题——防止流量“逃避”。另一方面，在TNEC中，重点是对误导性噪声的选择性。该项目引入了一个名为“混淆”的新概念，即第二或第三方对窃听者发出人工噪音，使其难以与目标的通信区分开来。混淆具有不需要通信双方端到端的合作就能实现抗窃听的新特性。TNEC将使混淆形式化，并研究特定的网络和窃听配置对混淆技术的敏感性，从而产生测量和量化被截获的流量流的“保真度”的工具，即使在存在主动对策的情况下。更广泛地说，该项目将检查网络架构是否会加剧混乱，可能导致网络在不需要端到端加密的情况下天生就能抵抗窃听。

AbstractProposal Number: 0524047PI: Blaze, Matthew Institution: University of PennsylvaniaTitle: Trustworthy Network Eavesdropping & Countermeasures (TNEC)The TNEC project examines the problem of Internet traffic interception from the point of view of the eavesdropper. It investigates whether the very properties that make it unwise to depend on networks for confidentiality can be turned on their head to effectively frustrate eavesdropping.Network interception is usually framed as a problem of sensitivity -- preventing traffic "evasion." In TNEC, on the other hand, the focus is on selectivity against misleading noise. The project introduces a new concept, called "confusion," in which a second- or third- party directs artificial noise at the eavesdropper that is difficult to distinguish from targets' traffic. Confusion has the novel property that it does not require end-to-end cooperation by the communicating parties in order to achieve eavesdropping resistance.TNEC will formalize confusion and study specific networks and eavesdropping configurations for susceptibility to confusion techniques, leading to tools for measuring and quantifying the "fidelity" of intercepted traffic streams even in the presence of active countermeasures. More broadly, the project will examine the network architectures for exacerbating confusion, possibly leading to networks that inherently resist eavesdropping without the need for end-to-end encryption.