CT-S: Application-Aware Anonymity (A3) for the Masses

该项目的目标是开发应用感知匿名(A3)基础设施，这是一种灵活、安全且低开销的基础设施，用于在Internet上部署基于匿名的服务。A3允许应用程序根据其特定需求定制其匿名性属性和性能特征。A3采用了一种新的路径选择方案，允许主机发现具有特定匿名性和网络属性的路由。声明性网络被用作用户使用声明性接口指定其路由的可扩展框架。A3利用将节点映射到n维坐标的网络坐标系，使得坐标之间的距离对应于网络度量，例如节点之间的延迟和带宽。为了确保其网络坐标系的安全，A3利用准确性，这是一种完全去中心化的基于投票的服务，不需要事先共享秘密或受信任的节点来验证网络坐标。这个项目的智能优点是整合了网络、安全和分布式数据管理的概念。该计划的更广泛影响是开发了可扩展的路由基础设施，使匿名源路由协议和应用程序能够快速开发、部署和测试。A3将作为开源发布，并部署为具有声明性API的PlanetLab服务，以使安全和网络研究人员能够快速开发、部署和试验不同的匿名路由策略。这种基础设施的潜在应用包括下一代互联网服务的匿名化，包括IP语音、视频点播、视频电话会议以及实时音频和视频流。

The goal of this project is to develop the Application Aware Anonymity (A3) infrastructure, a flexible, secure, and low-overhead infrastructure for deploying anonymity-based services on the Internet. A3 allows applications to tailor their anonymity properties and performance characteristics according to their specific requirements. A3 employs a novel path selection scheme that allows hosts to discover routes with specific anonymity and network properties. Declarative networking is used as an extensible framework for users to specify their routes using a declarative interface. A3 utilizes network coordinate systems that map nodes to n-dimensional coordinates such that the distance between coordinates corresponds to network metrics such as latency and bandwidth between the nodes. To secure its network coordinate systems, A3 utilizes Veracity, a fully decentralized vote-based service that does not require a priori shared secrets or trusted nodes to verify network coordinates. The intellectual merit of this project is the integration of conceptsfrom networking, security, and distributed data management. The broader impact of this program is the development of an extensible routing infrastructure that enables the rapid development, deployment, and testing of anonymous source-routing protocols and applications. A3 will be disseminated as open-source, and deployed as a PlanetLab service with a declarative API to enable security and networking researchers to rapidly develop, deploy, and experiment with different anonymous routing strategies. Potential applications of this infrastructure include the anonymization of next-generation Internet services including voice-over-IP, video-on-demand, video teleconferencing, and live audio and video streaming.