CAREER: GAIA: A Self-organizing, Self-healing Network Infrastructure

Ben Zhao加州大学圣塔芭芭拉分校0546216摘要互联网规模应用的未来依赖于安全连接分布式资源，如公司数据中心、视频会议站点和分布式Web缓存。不幸的是，今天的互联网对分布式应用程序来说是非常不友好的。每天都有新的病毒和蠕虫被发现，并不断威胁通过利用软件和网络漏洞危害终端主机。与此同时，管理员们也在不断地竞赛，以确保机器的安全。本项目的目标是研究设计和部署一个自我修复的网络基础设施，使分布式应用程序能够在这种环境中生存，保持可用性，同时抵御来自受损内部主机和外部攻击者的攻击。该项目的重点是主动避免与可疑网络实体的交互，并从内部和外部攻击中被动检测和恢复。与基于终端主机或基于协议的方法相比，我们的方法是独特的，尽管终端主机是不安全的，会不断受到攻击和妥协，但我们仍然试图保持长期的应用程序可用性。 PI正在构建Gaia基础设施，该基础设施位于结构化对等覆盖之上，并利用覆盖路由来实现可扩展的互连。

Ben ZhaoUniversity of California, Santa Barbara0546216AbstractThe future of Internet-scale applications relies on securely connectingdistributed resources such as corporate data centers, video-conferencingsites, and distributed web caches. Unfortunately, today's Internet is extremely inhospitable for distributedapplications. New viruses and worms are discovered on a daily basis, andconstantly threaten to compromise end hosts by exploiting software andnetwork vulnerabilities. Meanwhile, administratorsare in a constant race to secure machines before they are compromised.The objective of this project is to investigate the design and deployment ofa self-healing network infrastructure that allows distributed applications tosurvive in this environment by maintaining availability while resistingattacks from compromised internal hosts and external attackers. The projectfocuses on both proactively avoiding interactions with suspicious networkentities, and reactively detecting and recovering from internal and externalattacks. Compared to end-host or protocol based approaches, our approach is unique intrying to maintain long-term application availability despite the assumptionthat end hosts are insecure and will be continuously attacked andcompromised. The PI is building the Gaia infrastructure on top of a structuredpeer-to-peer overlay and leverage overlay routing for our scalablecommunication primitive.