SGER: Investigating Tradeoffs Between Security and Privacy in Overlay Distributed Systems

SGER：研究覆盖分布式系统中安全性和隐私性之间的权衡

• 批准号: 0549006
• 负责人: Li Xiao
• 金额: --
• 依托单位: Michigan State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-09-01 至 2007-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0549006&HistoricalAwards=false
• 关键词: SGER; Investigating; Tradeoffs; Between; Security

One important problem in peer-to-peer (P2P) overlay distributed systems isto enforce the trust of the data stored in the system, and protect thesecurity and privacy of the peers. However, current research addressesthis problem in two directions with independent efforts: privacy andsecurity. In the privacy direction, researchers focus on proposinganonymity protocols to hide peers' identities and on how to prevent theattackers from revealing peers' identities. In the security direction, onemajor research focus is to detect the identities of peers who aresuspicious to disturb normal operations in P2P systems intentionally orunintentionally. If a peer can absolutely hide his/her identity, theanonymity protocol can be possibly abused to threat the Internet security.Increasing peers' privacy means increasing the difficulties to ensuresecurity. In this project, the PI conducts research to understand andprovide solutions on balancing the tradeoffs between privacy and securityin P2P systems. Specifically, (1) the PI develops anonymity communicationprotocols to provide privacy protection for P2P users with securityinsurance; (2) taking overlay distributed denial-of-service and fileintegrity as case studies for security issues, the PI develops technicalsecurity solutions without conflict with privacy requirements; (3) theresearch investigates a wide range of security issues by developingsecurity solutions to balance tradeoffs of privacy and security. Thisproject is integrated to a Microsoft sponsored undergraduate coursedevelopment, where important topics of networking security and privacy,design of decentralized P2P systems are being studied.----------------------------------------------------------

对等（P2P）覆盖分布式系统中的一个重要问题是加强系统中存储数据的信任，保护节点的安全和隐私。然而，目前的研究解决这个问题在两个方向与独立的努力：隐私和安全。在隐私方面，研究者们主要致力于提出匿名协议来隐藏节点的身份，以及如何防止攻击者泄露节点的身份。在安全方面，一个主要的研究重点是检测那些有意或无意干扰P2P系统正常运行的恶意节点的身份。如果一个节点能够完全隐藏自己的身份，那么匿名协议就有可能被滥用，从而威胁到互联网的安全，增加节点的隐私性意味着增加安全性的难度。在这个项目中，PI进行研究，以了解和提供解决方案，在P2P系统中的隐私和安全之间的权衡。具体而言，（1）研究匿名通信协议，为P2P用户提供隐私保护，并提供安全保障：（2）以覆盖分布式拒绝服务和文件完整性为安全问题的案例研究，研究与隐私要求不冲突的技术安全解决方案;（3）通过开发安全解决方案来平衡隐私和安全的权衡，研究了广泛的安全问题。该项目已集成到微软赞助的本科课程开发中，其中正在研究网络安全和隐私、去中心化P2P系统设计等重要主题。-