CT-ISG: Towards Trustworthy Peer-to-Peer Overlay Networks

建议：0715833CT-ISG：迈向可信赖的对等覆盖网络Sanjay G.Rao普渡大学这个项目寻求通过在互联网规模的覆盖网络设计中的最新进展来创建可信赖的对等覆盖系统，以在对手在场的情况下满足性能要求的应用。当今流行的对等系统中的设计限制可能被利用来导致对节点的大规模拒绝服务攻击，甚至不是覆盖系统的一部分。此外，对手可能会控制覆盖结构，从而对应用程序性能造成严重影响。为了解决这一问题，该项目将(I)设计健壮的和攻击者弹性的适应协议，这有助于一门新兴的可信适应科学，该科学定义了构建分布式系统的新转变；(Ii)对组管理算法的设计与其被利用来在因特网上发动分布式拒绝服务攻击之间的相互作用获得基本的见解；(Iii)探索对等设计之间的相互作用、由此产生的流量特征以及区分正常的和异常的对等流量模式的含义；以及(Iv)设计可靠、可扩展和抗攻击的密钥分发机制，以帮助确保特定应用数据的机密性和完整性。该项目将在成熟和广泛部署的对等系统的背景下演示和验证新提出的机制。对等视频广播将用于促进拉斐特地区的在线教育，并将转播与安全相关的研讨会系列。该项目将有利于GENI等大型试验台的设计。PI将与流行的点对点系统的开发人员通信，以提醒他们系统中的关键设计漏洞。

Proposal: 0715833CT-ISG: Towards Trustworthy Peer-to-Peer Overlay NetworksSanjay G. RaoPurdue UniversityThis project seeks to create trustworthy peer-to-peer overlay systems through fundamental advances to the state-of-the-art in the design of Internet-scale, overlay networks for performance-demandingapplications in the presence of adversaries. Design limitations in popular peer-to-peer systems today may beexploited to cause large-scale denial of service attacks on nodes not even part of the overlay system. Further, adversaries maycontrol the overlay construction to create a crippling impact on application performance. To tackle this, the project will(i) Design robust and attacker resilient adaptation protocols contributing to an emerging science of trustworthy adaptabilitythat defines a new shift in building distributed systems; (ii) Obtain fundamental insights into the interplay between the design of group management algorithms and their vulnerability to beingexploited to launch distributed denial of service attacks on theInternet; (iii) Explore the interactions between peer-to-peer design, resulting traffic characteristics, and implications for distinguishingnormal peer-to-peer traffic patterns from anomalous ones; and (iv) Design mechanisms for reliable, scalable and adversary-resilient key dissemination to help ensure confidentiality and integrity of application-specific data.The project will demonstrate and validate the novel proposed mechanisms inthe context of mature and widely deployed peer-to-peer systems.Peer-to-peer video broadcasting will be used to promote online education in the Lafayette area, and tobroadcast a security-related seminar series. The project will benefit the design of large-scale testbeds such as GENI. The PIs will communicate with developers of popular peer-to-peer systems to alert them to critical design vulnerabilities in their systems.