CAREER: anon.next: Privacy-Enabled Routing in the Next-Generation Internet

像Tor这样的覆盖匿名系统可以有效地抵御多种隐私攻击，但它们的网络性能明显低于常规的互联网流量。该项目的目的是探索ofanon.next的设计，这是下一代互联网的匿名系统。在anon.next中，我们将匿名代理嵌入到新的互联网架构中，这样网络本身就可以提供覆盖设计无法提供的高效和有效的隐私保护。这个项目寻求在两个领域取得重大进展，这两个领域对anon.next的设计至关重要。第一，构造匿名代理的高吞吐量路径的方法，以最小的隐私泄漏将用户的数据包路由到目的地。其次，安全的方法来定位这些代理，而不依赖于集中式目录服务器或暴露用户的数据包路由。这两个组件都要求我们为给定的匿名路径和整个系统提供的隐私制定新的度量标准。我们正在进行分析和模拟研究，并通过在GENI试验台上进行广泛的实验来验证这些研究。 这些努力将为匿名系统的设计提供重要的见解，匿名系统提供个人隐私以及对举报人，记者和情报机构的审查阻力和保护。我们的项目也是理解和设计下一代互联网分布式系统所需的大量工作的一部分。该项目涉及多个层次的学生，包括参加夏令营的初中和高中学生，研究寻找针对我们系统的新攻击的本科生，以及研究生。

Overlay anonymity systems like Tor are effective against many kinds of attackson privacy, but they have significantly slower network performance than regularInternet traffic. The purpose of this project is to explore the design ofanon.next, an anonymity system for the next-generation Internet. In anon.next,we embed anonymizing proxies into new Internet architectures, so that thenetwork itself can provide efficient and effective privacy protection in a waythat overlay designs cannot. This project seeks to make major advances in twoareas key to the design of anon.next. First, methods to constructhigh-throughput paths of anonymizing proxies to route the user's packets totheir destinations with minimal leakage of privacy. Second, secure methods tolocate those proxies without relying on centralized directory servers orexposing the users' packet routes. Both components require us to develop newmetrics for the privacy provided by a given anonymizing path and by the systemas a whole. We are conducting analysis and simulation studies and validatingthese with extensive experimentation on GENI testbeds. These efforts willprovide major insights into the design of anonymity systems, which providepersonal privacy as well as censorship resistance and protection forwhistle-blowers, journalists, and intelligence services. Our project is alsopart of the large effort required to understand and design distributed systemsin the next-generation Internet. This project involves students at many levels,including middle and high school students in summer camp settings,undergraduate students in research into finding new attacks against oursystems, and graduate students.