Collaborative Research: Planning Grant: A Clean-Slate Design for the Next-Generation Secure Internet

互联网已经成为我们经济、社会和政府不可或缺的基础设施。然而，尽管互联网至关重要，但今天的互联网极其脆弱，经常遭受攻击。当今互联网存在安全漏洞的主要原因之一是，互联网协议和架构是为可信环境而设计的。这一假设显然不再适用于当今的互联网，它连接着分布在世界各地的数百万人、计算机和公司。许多研究人员研究了如何保护互联网，主要是通过提出补丁来解决当前的漏洞。然而，部分解决办法和特设机制往往不能解决问题的根源，因此无法根除当前的问题，并防止它们在未来以不同的形式表现出来。此外，安全补丁和临时安全解决方案增加了网络复杂性，进而增加了漏洞。因此，我们需要一种全新的下一代互联网设计，它是从合理的原则开始设计的。智力价值：首席调查人员(PI)计划进行一系列努力，让社区系统地探索如何为下一代互联网提供一套基本的安全设计原则和机制，从而为下一代互联网提供可证明的安全保证这一重要问题。规划工作的一部分是举办一个或多个研讨会。从从头开始，研讨会的参与者将调查设计安全的下一代互联网的基本问题，这不仅消除了当前的许多安全问题，还提供了针对不可预见的未来攻击的可证明的安全保证。下一代安全互联网的部署很可能从研究试验台开始。这样的基础设施将吸引需要高保证的应用程序，从而使主机过渡到安全的互联网。此类试验台的成功关键取决于研究人员在网络、架构和安全方面的协作。有许多小项目的分布式工作不太可能产生与协调合作研究工作相同的影响。这一规划工作将提供研究工作的协调，并为有前途的研究方向建立社区共识。这一努力将使网络和安全社区就网络中提供哪些安全特性达成共识，并为设计安全的下一代安全互联网确立有前途的研究方向。这项工作包括一个研讨会，有来自工业界和学术界的30-40名网络和安全专家参加，以进一步探索和确定下一代安全互联网的研究方向。PIS将制作一份报告，将这一规划活动的结果传达给更广泛的研究社区。通过一系列会议、有组织的讨论和演讲，这一努力将构建路线图，并帮助社区就重要的研究方向以及不同的研究努力如何协同工作达成共识，以实现设计和实施下一代安全互联网架构试验台的预期目标。

The Internet has become an indispensable infrastructure for our economy, society, and government. However, despite its critical importance, today's Internet is extremely fragile and suffers from frequent attacks. One of the main reasons for the security vulnerabilities of today's Internet is that the Internet protocols and architecture were designed for a trustworthy environment. This assumption is clearly no longer valid in today's Internet, connecting millions of people, computers, and corporations distributed throughout the world. Many researchers have studied how to secure the Internet, mostly by proposing patches to address current vulnerabilities. However, partial solutions and ad hoc mechanisms often do not address the root cause of the problems, and hence will not be able to eradicate the current problems and prevent them from manifesting in different forms in the future. Moreover, security patches and ad hoc security solutions increase network complexity, which in turn increases vulnerability. Thus, we need a radical new design for a next-generation Internet, which is designed ground-up from sound principles. Intellectual Merit: The principal investigators (PIs) plan a series of efforts to engage the community in systematically exploring this important question of how to provide the next-generation Internet with a set of fundamental security design principles and mechanisms that will provide the next generation Internet with provable security guarantees. One part of the planning effort is one or more workshops. Starting from a clean-slate approach, participants in the workshops will investigate the fundamental issues in designing a secure next generation Internet, which not only removes many of the current security problems but also provides provable security guarantees against unforeseen future attacks. The deployment of a next-generation secure Internet will likely start out as a research test bed. Such an infrastructure will attract applications requiring high-assurance, resulting in a transition of hosts to the secure Internet. The success of such a test bed critically depends on the collaboration of researchers in networking, architecture, and security. A distributed effort with many small projects is unlikely to have the same impact as a coordinated collaborative research effort. This planning effort will provide coordination of research efforts and establishing community consensus for promising research directions.Broader Impacts. This effort will involve the networking and security communities to establish a consensus on what security properties to provide in the network, and to establish promising research directions for designing a secure next-generation secure Internet. Included in this effort is a workshop with 30-40 networking and security experts from industry and academia to further explore and define a research direction for the next-generation secure Internet. The PIs will produce a report to communicate the results from this planning activity to the broader research community. Through a series of meetings, organized discussions, presentations, this effort will build a roadmap and help the community to reach consensus on what the important research directions are and how the different research efforts work together to achieve the desired goal of designing and implementing a testbed of an architecture for a next-generation secure Internet.