Collaborative Research: Planning Grant: A Clean-Slate Design for the Next-Generation Secure Internet

合作研究：规划拨款：下一代安全互联网的全新设计

• 批准号: 0537246
• 负责人: Adrian Perrig
• 金额: $ 15万
• 依托单位: Carnegie-Mellon University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-08-01 至 2007-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0537246&HistoricalAwards=false
• 关键词: Collaborative; Research; Planning; Grant; Clean

The Internet has become an indispensable infrastructure for our economy, society, and government. However, despite its critical importance, today's Internet is extremely fragile and suffers from frequent attacks. One of the main reasons for the security vulnerabilities of today's Internet is that the Internet protocols and architecture were designed for a trustworthy environment. This assumption is clearly no longer valid in today's Internet, connecting millions of people, computers, and corporations distributed throughout the world. Many researchers have studied how to secure the Internet, mostly by proposing patches to address current vulnerabilities. However, partial solutions and ad hoc mechanisms often do not address the root cause of the problems, and hence will not be able to eradicate the current problems and prevent them from manifesting in different forms in the future. Moreover, security patches and ad hoc security solutions increase network complexity, which in turn increases vulnerability. Thus, we need a radical new design for a next-generation Internet, which is designed ground-up from sound principles. Intellectual Merit: The principal investigators (PIs) plan a series of efforts to engage the community in systematically exploring this important question of how to provide the next-generation Internet with a set of fundamental security design principles and mechanisms that will provide the next generation Internet with provable security guarantees. One part of the planning effort is one or more workshops. Starting from a clean-slate approach, participants in the workshops will investigate the fundamental issues in designing a secure next generation Internet, which not only removes many of the current security problems but also provides provable security guarantees against unforeseen future attacks. The deployment of a next-generation secure Internet will likely start out as a research test bed. Such an infrastructure will attract applications requiring high-assurance, resulting in a transition of hosts to the secure Internet. The success of such a test bed critically depends on the collaboration of researchers in networking, architecture, and security. A distributed effort with many small projects is unlikely to have the same impact as a coordinated collaborative research effort. This planning effort will provide coordination of research efforts and establishing community consensus for promising research directions.Broader Impacts. This effort will involve the networking and security communities to establish a consensus on what security properties to provide in the network, and to establish promising research directions for designing a secure next-generation secure Internet. Included in this effort is a workshop with 30-40 networking and security experts from industry and academia to further explore and define a research direction for the next-generation secure Internet. The PIs will produce a report to communicate the results from this planning activity to the broader research community. Through a series of meetings, organized discussions, presentations, this effort will build a roadmap and help the community to reach consensus on what the important research directions are and how the different research efforts work together to achieve the desired goal of designing and implementing a testbed of an architecture for a next-generation secure Internet.

互联网已经成为我们经济、社会和政府不可或缺的基础设施。然而，尽管它至关重要，今天的互联网是极其脆弱的，遭受频繁的攻击。当今Internet存在安全漏洞的主要原因之一是Internet协议和体系结构是为可信环境而设计的。这种假设在今天的互联网上显然不再有效，互联网连接着分布在世界各地的数百万人、计算机和公司。许多研究人员研究了如何保护互联网，主要是通过提出补丁来解决当前的漏洞。但是，局部解决办法和特设机制往往不能解决问题的根本原因，因此不能根除目前的问题，也不能防止这些问题今后以不同的形式出现。此外，安全补丁和临时安全解决方案增加了网络的复杂性，从而增加了漏洞。因此，我们需要一个彻底的新设计的下一代互联网，这是基于合理的原则设计的。智力价值：主要研究人员（pi）计划进行一系列努力，使社区参与系统地探索如何为下一代互联网提供一套基本安全设计原则和机制这一重要问题，这些原则和机制将为下一代互联网提供可证明的安全保证。计划工作的一部分是一个或多个研讨会。从全新的方法开始，研讨会的参与者将研究设计安全的下一代互联网的基本问题，这不仅消除了许多当前的安全问题，而且还提供了可证明的安全保证，以防止不可预见的未来攻击。下一代安全互联网的部署很可能从研究试验台开始。这样的基础设施将吸引需要高保障的应用程序，从而导致主机向安全的Internet的过渡。这种测试平台的成功关键取决于研究人员在网络、体系结构和安全性方面的合作。由许多小项目组成的分布式工作不太可能产生与协调合作研究工作相同的影响。这项规划工作将协调研究工作，并为有前途的研究方向建立社区共识。更广泛的影响。这项工作将涉及网络和安全社区，就网络中提供的安全属性达成共识，并为设计安全的下一代安全互联网建立有前途的研究方向。其中包括由工业界和学术界的30-40名网络和安全专家组成的研讨会，以进一步探索和确定下一代安全互联网的研究方向。pi将制作一份报告，将计划活动的结果传达给更广泛的研究界。通过一系列的会议、有组织的讨论和演讲，这项工作将建立一个路线图，并帮助社区就重要的研究方向以及不同的研究工作如何协同工作达成共识，以实现设计和实现下一代安全互联网架构测试平台的预期目标。