CT-ISG: Amplifying both security and reliability

在接下来的几年里，下一代互联网的基本架构将被决定，希望更加强调安全性。在网络中，安全和通信是相互依存的。加密工具将需要确保通信是可靠的，尽管黑客的拒绝服务攻击和其他破坏。另一方面，适当的通信体系结构可以提供原语，使强大的安全加密工具（如安全多方计算）具有足够的客户端来实现。不幸的是，传统上对网络中可靠通信和计算的研究没有考虑安全性，反之亦然。本研究考察了一种以健壮的方式包含安全考虑的通信通道模型。在该模型中，可以同时对协议的保密性和可靠性两个双重目标进行评估。这个模型从密码学、分布式系统和纠错的角度统一了以前解决这些问题的方法。该模型还将信息论技术（基于攻击者无法访问某些信息的安全性）与复杂性理论方法（基于攻击者无法解决棘手的计算问题）结合起来。将探讨从具有较弱属性的通道构建具有较强属性（增加隐私性、身份验证或可靠性）的通道的可能性。例如，是否有可能采用一个任意通道，该通道向目标接收者提供的信息仅比攻击者提供的信息多一点点，并使用它来构建一个高度可靠且几乎完全保密的通道？我们是否可以使用一个用于秘密、可靠通信的信道来创建一个模拟虚拟广播的信道？保密和匿名之间的关系是什么？

Over the next few years, the basic architecture of the next generation of Internet will be decided, hopefully with a much greater emphasis on security. In a network, security and communication are interdependent. Cryptographic tools will be required to ensure that communication is dependable despite hackers' denial-of-service attacks and other sabotage. On the other hand, proper communications architecture could provide primitives that make powerful cryptographic tools for security, such as secure multiparty computation, e_cient enough to be implemented. Unfortunately, research on reliable communications and computation in a network has traditionally been studied without consideration of security, and vice versa. This research examines a model of communication channels that includes security considerations in a robust way. In this model, protocols can be simultaneously evaluated for the two dual objectives of secrecy and reliability. This model unites previous approaches to these questions from the points of view of cryptography, distributed systems, and error-correction. The model also unites information-theoretic techniques (with security based on the attacker's inability to access certain information) with complexitytheoretic approaches (based on the attacker's inability to solve intractable computational problems). Possible constructions of channels with stronger properties (increased privacy, authentication, or reliability) from those with weaker properties will be explored. For example, is it possible to take an arbitrary channel that gives only slightly more information to the intended receiver than to an attacker and use it to build a highly reliable and almost completely secret channel? Can we use a channel for secret, reliable communication to create a channel emulating a virtual broadcast? What is the relationship between secrecy and anonymity?