CT-S: Application-Aware Anonymity (A3) for the Masses

CT-S：面向大众的应用程序感知匿名 (A3)

• 批准号: 0831376
• 负责人: Boon Thau Loo
• 金额: $ 40万
• 依托单位: University of Pennsylvania
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-09-01 至 2011-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0831376&HistoricalAwards=false
• 关键词: CT; Application; Aware; Anonymity; A3

The goal of this project is to develop the Application Aware Anonymity (A3) infrastructure, a flexible, secure, and low-overhead infrastructure for deploying anonymity-based services on the Internet. A3 allows applications to tailor their anonymity properties and performance characteristics according to their specific requirements. A3 employs a novel path selection scheme that allows hosts to discover routes with specific anonymity and network properties. Declarative networking is used as an extensible framework for users to specify their routes using a declarative interface. A3 utilizes network coordinate systems that map nodes to n-dimensional coordinates such that the distance between coordinates corresponds to network metrics such as latency and bandwidth between the nodes. To secure its network coordinate systems, A3 utilizes Veracity, a fully decentralized vote-based service that does not require a priori shared secrets or trusted nodes to verify network coordinates. The intellectual merit of this project is the integration of conceptsfrom networking, security, and distributed data management. The broader impact of this program is the development of an extensible routing infrastructure that enables the rapid development, deployment, and testing of anonymous source-routing protocols and applications. A3 will be disseminated as open-source, and deployed as a PlanetLab service with a declarative API to enable security and networking researchers to rapidly develop, deploy, and experiment with different anonymous routing strategies. Potential applications of this infrastructure include the anonymization of next-generation Internet services including voice-over-IP, video-on-demand, video teleconferencing, and live audio and video streaming.

该项目的目标是开发应用感知匿名（Application Aware Anonymity, A3）基础设施，这是一种灵活、安全和低开销的基础设施，用于在Internet上部署基于匿名的服务。A3允许应用程序根据其特定需求定制其匿名属性和性能特征。A3采用了一种新颖的路径选择方案，允许主机发现具有特定匿名性和网络属性的路由。声明性网络被用作可扩展框架，供用户使用声明性接口指定路由。A3利用网络坐标系统将节点映射到n维坐标，使得坐标之间的距离对应于节点之间的延迟和带宽等网络指标。为了保护其网络坐标系统，A3利用了Veracity，这是一种完全分散的基于投票的服务，不需要先验的共享秘密或可信节点来验证网络坐标。这个项目的智力优势在于集成了来自网络、安全性和分布式数据管理的概念。该项目的更广泛影响是开发可扩展的路由基础设施，使匿名源路由协议和应用程序的快速开发、部署和测试成为可能。A3将作为开放源代码传播，并作为PlanetLab服务部署，该服务带有声明性API，使安全和网络研究人员能够快速开发、部署和实验不同的匿名路由策略。这种基础设施的潜在应用包括下一代互联网服务的匿名化，包括ip语音、视频点播、视频电话会议以及实时音频和视频流。