CT-ISG: Towards Trustworthy Peer-to-Peer Overlay Networks

提案：0715833CT-ISG：迈向可信赖的点对点覆盖网络sanjay G. rau普渡大学该项目旨在通过在互联网规模的覆盖网络设计中取得最先进的基础进展，创建可信赖的点对点覆盖系统，以满足存在对手的性能要求。当今流行的点对点系统的设计限制可能会被利用，对甚至不是覆盖系统一部分的节点造成大规模的拒绝服务攻击。此外，攻击者可能会控制覆盖结构，从而对应用程序性能造成严重影响。为了解决这个问题，该项目将(i)设计健壮且具有攻击弹性的适应协议，为新兴的可信适应性科学做出贡献，这将定义构建分布式系统的新转变；（ii）对群管理算法的设计与其被利用在互联网上发起分布式拒绝服务攻击的脆弱性之间的相互作用获得基本见解；（iii）探索点对点设计之间的相互作用，由此产生的流量特征，以及区分正常点对点流量模式与异常流量模式的含义；（iv）设计可靠、可扩展和对抗弹性的密钥传播机制，以帮助确保特定应用数据的保密性和完整性。该项目将在成熟和广泛部署的点对点系统的背景下演示和验证新提出的机制。点对点视频广播将用于促进拉斐特地区的在线教育，并播放与安全相关的系列研讨会。该项目将有利于GENI等大型试验台的设计。pi将与流行的点对点系统的开发人员进行通信，提醒他们注意系统中的关键设计漏洞。

Proposal: 0715833CT-ISG: Towards Trustworthy Peer-to-Peer Overlay NetworksSanjay G. RaoPurdue UniversityThis project seeks to create trustworthy peer-to-peer overlay systems through fundamental advances to the state-of-the-art in the design of Internet-scale, overlay networks for performance-demandingapplications in the presence of adversaries. Design limitations in popular peer-to-peer systems today may beexploited to cause large-scale denial of service attacks on nodes not even part of the overlay system. Further, adversaries maycontrol the overlay construction to create a crippling impact on application performance. To tackle this, the project will(i) Design robust and attacker resilient adaptation protocols contributing to an emerging science of trustworthy adaptabilitythat defines a new shift in building distributed systems; (ii) Obtain fundamental insights into the interplay between the design of group management algorithms and their vulnerability to beingexploited to launch distributed denial of service attacks on theInternet; (iii) Explore the interactions between peer-to-peer design, resulting traffic characteristics, and implications for distinguishingnormal peer-to-peer traffic patterns from anomalous ones; and (iv) Design mechanisms for reliable, scalable and adversary-resilient key dissemination to help ensure confidentiality and integrity of application-specific data.The project will demonstrate and validate the novel proposed mechanisms inthe context of mature and widely deployed peer-to-peer systems.Peer-to-peer video broadcasting will be used to promote online education in the Lafayette area, and tobroadcast a security-related seminar series. The project will benefit the design of large-scale testbeds such as GENI. The PIs will communicate with developers of popular peer-to-peer systems to alert them to critical design vulnerabilities in their systems.