NeTS-NECO: Collaborative Research: Fixing the Reliability Problem in Network Software From its Root

互联网的大部分复杂性存在于运行在互联网路由器上的软件中。该软件中的漏洞是一个非常关键的问题，导致了最近许多引人注目的攻击和中断，并且日益成为构建高可靠网络的瓶颈。pi正在设计和评估技术，以使互联网对软件错误具有弹性。他们的方法包括两个关键部分。首先，他们正在构建一个高度可靠的网络路由器的单个实例。这包括通过使用静态和动态代码分析以及对公开披露的漏洞进行分类，对路由器软件中的漏洞进行特征研究。它们还应用和扩展了回滚、重新排序输入、微重启和自动调试等技术，以构建对实现错误具有弹性的软件路由器。其次，pi正在开发和构建高可用性抗bug网络的架构。他们的设计利用了“控制和数据多样性”的原则，即同时运行一个软件或数据的多个功能相等的实例。每个实例都以某种方式与其他实例进行更改，从而使多个副本不可能同时经历相同的错误，例如随机化执行环境，让每个实例负责路由的子集，或者让不同的程序员实现每个实例。除了提供支持这些网络的设计和算法外，pi还将提供可用的工具和实现，以使其能够使用。这个项目的成功完成将显著提高互联网避免故障和从故障中恢复的能力。

Most of the Internet's complexity resides in software running on Internet routers. Bugs in this software are a highly critical problem, leading to a number of recent high-profile attacks and outages, and are increasingly becoming a bottleneck in building highly reliable networks. The PIs are designing and evaluating techniques to make the Internet resilient to software bugs. Their approach consists of two key components. First, they are building a highly reliable single instance of a network router. This involves performing a characteristic study of bugs in router software, by using static and dynamic code analysis and by taxonomizing publicly disclosed vulnerabilities. They also apply and extend techniques such as rollback, reordering inputs, microreboots, and automated debugging to construct a software router resilient to implementation bugs. Second, the PIs are developing and building an architecture for highly-available bug-resistant networks. Their design leverages the principle of "control and data diversity", which simultaneously runs multiple functionally-equivalent instances of a piece of software or data. Each instance is changed from the others in a way that makes it unlikely multiple copies will simultaneously undergo the same bug, for example by randomizing the execution environment, having each instance be responsible for a subset of routes, or by having different programmers implement each instance. In addition to producing designs and algorithms that enable these networks, the PIs will also make available tools and implementations to enable their use. Successful completion of this project will significantly improve the Internet's ability to avoid and recover from failures.