NeTS-NECO: Collaborative Research: Fixing the Reliability Problem in Network Software From its Root

互联网的大部分复杂性在于运行在互联网路由器上的软件。 该软件中的漏洞是一个非常关键的问题，导致了最近一些备受瞩目的攻击和中断，并且越来越成为构建高度可靠网络的瓶颈。 PI正在设计和评估技术，使互联网对软件错误具有弹性。他们的方法包括两个关键组成部分。 首先，他们正在构建一个高度可靠的网络路由器的单个实例。这涉及使用静态和动态代码分析以及对公开披露的漏洞进行分类，对路由器软件中的漏洞进行特征研究。他们还应用和扩展了回滚、重新排序输入、微重启和自动调试等技术，以构建对实现错误有弹性的软件路由器。 第二，PI正在开发和构建一个高可用性的抗bug网络架构。 它们的设计利用了“控制和数据多样性”的原则，即同时运行一个软件或数据的多个功能等效实例。 每个实例都以一种使多个副本不太可能同时经历相同错误的方式进行更改，例如通过随机化执行环境，让每个实例负责路由的子集，或者让不同的程序员实现每个实例。 除了生成支持这些网络的设计和算法外，PI还将提供可用的工具和实现来支持它们的使用。 该项目的成功完成将大大提高互联网避免故障和故障恢复的能力。

Most of the Internet's complexity resides in software running on Internet routers. Bugs in this software are a highly critical problem, leading to a number of recent high-profile attacks and outages, and are increasingly becoming a bottleneck in building highly reliable networks. The PIs are designing and evaluating techniques to make the Internet resilient to software bugs. Their approach consists of two key components. First, they are building a highly reliable single instance of a network router. This involves performing a characteristic study of bugs in router software, by using static and dynamic code analysis and by taxonomizing publicly disclosed vulnerabilities. They also apply and extend techniques such as rollback, reordering inputs, microreboots, and automated debugging to construct a software router resilient to implementation bugs. Second, the PIs are developing and building an architecture for highly-available bug-resistant networks. Their design leverages the principle of "control and data diversity", which simultaneously runs multiple functionally-equivalent instances of a piece of software or data. Each instance is changed from the others in a way that makes it unlikely multiple copies will simultaneously undergo the same bug, for example by randomizing the execution environment, having each instance be responsible for a subset of routes, or by having different programmers implement each instance. In addition to producing designs and algorithms that enable these networks, the PIs will also make available tools and implementations to enable their use. Successful completion of this project will significantly improve the Internet's ability to avoid and recover from failures.