CT-ISG: Towards Trustworthy Peer-to-Peer Overlay Networks

提案：0715833 CT-ISG：走向可信赖的对等覆盖网络Sanjay G. RaoPurdue大学该项目旨在通过在互联网规模的最先进设计中取得根本性进展，创建值得信赖的对等覆盖系统，覆盖网络用于在对手存在的情况下要求性能的应用程序。当今流行的对等系统中的设计限制可能被利用，导致对甚至不是覆盖系统的一部分的节点的大规模拒绝服务攻击。 此外，攻击者可能会控制覆盖结构，从而对应用程序性能造成严重影响。为解决这一问题，该项目将㈠设计健壮的、对攻击者有复原力的适应协议，以促进一门新兴的可信赖适应性科学，这门科学定义了构建分布式系统的新转变; ㈡从根本上了解组管理算法的设计与其被利用在因特网上发动分布式拒绝服务攻击的脆弱性之间的相互作用; ㈢探讨对等网络设计之间的相互作用、由此产生的通信量特点以及区分正常对等网络通信量模式和异常模式的影响;和（iv）设计可靠的机制，可扩展且具有对抗弹性的密钥分发，有助于确保应用程序的机密性和完整性-具体数据。该项目将在成熟和广泛部署的对等系统中演示和验证新提出的机制。对等视频广播将用于促进拉斐特地区的在线教育，并广播与安全相关的系列研讨会。该项目将有利于GENI等大型试验平台的设计。PI将与流行的对等系统的开发人员进行通信，以提醒他们系统中的关键设计漏洞。

Proposal: 0715833CT-ISG: Towards Trustworthy Peer-to-Peer Overlay NetworksSanjay G. RaoPurdue UniversityThis project seeks to create trustworthy peer-to-peer overlay systems through fundamental advances to the state-of-the-art in the design of Internet-scale, overlay networks for performance-demandingapplications in the presence of adversaries. Design limitations in popular peer-to-peer systems today may beexploited to cause large-scale denial of service attacks on nodes not even part of the overlay system. Further, adversaries maycontrol the overlay construction to create a crippling impact on application performance. To tackle this, the project will(i) Design robust and attacker resilient adaptation protocols contributing to an emerging science of trustworthy adaptabilitythat defines a new shift in building distributed systems; (ii) Obtain fundamental insights into the interplay between the design of group management algorithms and their vulnerability to beingexploited to launch distributed denial of service attacks on theInternet; (iii) Explore the interactions between peer-to-peer design, resulting traffic characteristics, and implications for distinguishingnormal peer-to-peer traffic patterns from anomalous ones; and (iv) Design mechanisms for reliable, scalable and adversary-resilient key dissemination to help ensure confidentiality and integrity of application-specific data.The project will demonstrate and validate the novel proposed mechanisms inthe context of mature and widely deployed peer-to-peer systems.Peer-to-peer video broadcasting will be used to promote online education in the Lafayette area, and tobroadcast a security-related seminar series. The project will benefit the design of large-scale testbeds such as GENI. The PIs will communicate with developers of popular peer-to-peer systems to alert them to critical design vulnerabilities in their systems.