NeTS-NECO: Collaborative Research: Fixing the Reliability Problem in Network Software From its Root

NeTS-NECO：协作研究：从根本上解决网络软件的可靠性问题

• 批准号: 0831646
• 负责人: Jennifer Rexford
• 金额: $ 35万
• 依托单位: Princeton University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-09-01 至 2013-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0831646&HistoricalAwards=false
• 关键词: NeTS; NECO; Collaborative; Research; Fixing

Most of the Internet's complexity resides in software running on Internet routers. Bugs in this software are a highly critical problem, leading to a number of recent high-profile attacks and outages, and are increasingly becoming a bottleneck in building highly reliable networks. The PIs are designing and evaluating techniques to make the Internet resilient to software bugs. Their approach consists of two key components. First, they are building a highly reliable single instance of a network router. This involves performing a characteristic study of bugs in router software, by using static and dynamic code analysis and by taxonomizing publicly disclosed vulnerabilities. They also apply and extend techniques such as rollback, reordering inputs, microreboots, and automated debugging to construct a software router resilient to implementation bugs. Second, the PIs are developing and building an architecture for highly-available bug-resistant networks. Their design leverages the principle of "control and data diversity", which simultaneously runs multiple functionally-equivalent instances of a piece of software or data. Each instance is changed from the others in a way that makes it unlikely multiple copies will simultaneously undergo the same bug, for example by randomizing the execution environment, having each instance be responsible for a subset of routes, or by having different programmers implement each instance. In addition to producing designs and algorithms that enable these networks, the PIs will also make available tools and implementations to enable their use. Successful completion of this project will significantly improve the Internet's ability to avoid and recover from failures.

互联网的大部分复杂性在于互联网路由器上运行的软件。 该软件中的错误是一个非常关键的问题，导致了最近一系列引人注目的攻击和中断，并且日益成为构建高度可靠网络的瓶颈。 PI 正在设计和评估使互联网能够抵御软件错误的技术。他们的方法由两个关键部分组成。 首先，他们正在构建高度可靠的网络路由器单一实例。这涉及通过使用静态和动态代码分析以及对公开披露的漏洞进行分类来对路由器软件中的错误进行特征研究。他们还应用和扩展了回滚、重新排序输入、微重启和自动调试等技术，以构建能够适应实现错误的软件路由器。 其次，PI 正在开发和构建高可用、防错误网络的架构。 他们的设计利用了“控制和数据多样性”的原则，同时运行一个软件或数据的多个功能等效的实例。 每个实例与其他实例的更改方式使得多个副本不太可能同时出现相同的错误，例如通过随机化执行环境、让每个实例负责路由的子集，或者让不同的程序员实现每个实例。 除了提供支持这些网络的设计和算法之外，PI 还将提供可用的工具和实现来支持它们的使用。 该项目的成功完成将显着提高互联网避免故障和从故障中恢复的能力。