CT-S: Application-Aware Anonymity (A3) for the Masses

该项目的目标是开发应用感知匿名性（A3）基础设施，这是一种灵活、安全和低开销的基础设施，用于在Internet上部署基于匿名性的服务。A3允许应用程序根据其特定要求定制其匿名属性和性能特征。A3采用了一种新的路径选择方案，允许主机发现具有特定匿名性和网络属性的路由。 声明式网络用作可扩展框架，供用户使用声明式接口指定其路由。A3利用将节点映射到n维坐标的网络坐标系，使得坐标之间的距离对应于网络度量，诸如节点之间的延迟和带宽。为了保护其网络坐标系统，A3使用了Veracity，这是一种完全分散的基于投票的服务，不需要先验共享秘密或可信节点来验证网络坐标。这个项目的智力价值是集成了网络、安全和分布式数据管理的概念。 该计划更广泛的影响是开发可扩展的路由基础设施，使匿名源路由协议和应用程序的快速开发、部署和测试成为可能。A3将以开源的形式传播，并作为具有声明性API的PlanetLab服务进行部署，以使安全和网络研究人员能够快速开发、部署和试验不同的匿名路由策略。这种基础设施的潜在应用包括下一代互联网服务的匿名化，包括IP语音、视频点播、视频电话会议以及实时音频和视频流。

The goal of this project is to develop the Application Aware Anonymity (A3) infrastructure, a flexible, secure, and low-overhead infrastructure for deploying anonymity-based services on the Internet. A3 allows applications to tailor their anonymity properties and performance characteristics according to their specific requirements. A3 employs a novel path selection scheme that allows hosts to discover routes with specific anonymity and network properties. Declarative networking is used as an extensible framework for users to specify their routes using a declarative interface. A3 utilizes network coordinate systems that map nodes to n-dimensional coordinates such that the distance between coordinates corresponds to network metrics such as latency and bandwidth between the nodes. To secure its network coordinate systems, A3 utilizes Veracity, a fully decentralized vote-based service that does not require a priori shared secrets or trusted nodes to verify network coordinates. The intellectual merit of this project is the integration of conceptsfrom networking, security, and distributed data management. The broader impact of this program is the development of an extensible routing infrastructure that enables the rapid development, deployment, and testing of anonymous source-routing protocols and applications. A3 will be disseminated as open-source, and deployed as a PlanetLab service with a declarative API to enable security and networking researchers to rapidly develop, deploy, and experiment with different anonymous routing strategies. Potential applications of this infrastructure include the anonymization of next-generation Internet services including voice-over-IP, video-on-demand, video teleconferencing, and live audio and video streaming.