EAGER: Collaborative Research: A Secure and Resilient Virtual Trust Routing Framework for Future Internet

EAGER：协作研究：面向未来互联网的安全且有弹性的虚拟信任路由框架

• 批准号: 1029546
• 负责人: Dijiang Huang
• 金额: $ 13.3万
• 依托单位: Arizona State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-05-01 至 2013-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1029546&HistoricalAwards=false
• 关键词: EAGER; Collaborative; Research; Secure; Resilient

Current network-centric Internet service model is prone toresource exhausting attacks such as Distributed Denial ofServices attacks. Due to the resource sharing nature andnon-coordinated monitoring capability of the current Internet,it is difficult to quickly identify attack sources. Second, anew trend is to develop a user-centric Internet service model,in which traditional local network services are outsourced toremote service providers such as for cloud services. This newtrend allows end users to fully control remote service nodes,their interconnections and routing, which imposes great threatson network resource allocations. Thus, it is highly desiredthat the future Internet is designed to provide a secureservice domain that is both network-centric and user-centric.As a fundamental core to this goal, a secure and resilientvirtualized routing architecture in a global inter-networkingenvironment is explored to provide network resource reservationprotection both at the network-centric and the user-centriclevel. A novel attribute-based, cryptography-based approach toconstruct secure virtualization is to be developed.Furthermore, an architectural solution to address the policyenforcement and inter-domain trust management is alsoconsidered. The end goal is to greatly improve the efficiencyof attack monitoring and intrusion detection and to increasethe resiliency of the future Internet. This is a collaborativeexploratory project bringing together researchers from theUniversity of Missouri-Kansas City, Arizona State University,and Osaka City University, Japan. All research results will bemade available to the scientific community.

当前以网络为中心的Internet服务模型容易受到分布式拒绝服务攻击等资源耗尽攻击。由于当前互联网的资源共享性和非协同监控能力，很难快速识别攻击源.其次，新的趋势是发展以用户为中心的互联网服务模式，传统的本地网络服务外包给远程服务提供商，例如云服务。这种新的趋势允许终端用户完全控制远程服务节点及其互连和路由，这对网络资源分配带来了巨大的威胁。因此，未来的互联网需要提供一个以网络和用户为中心的虚拟服务域，作为这一目标的核心，本文研究了一种在全球互联网络环境下的安全、可靠的虚拟路由体系结构，以提供以网络和用户为中心的网络资源预留保护。提出了一种基于属性和密码的安全虚拟化方法，并提出了一种解决策略执行和域间信任管理的体系结构方案。最终目标是大大提高攻击监控和入侵检测的效率，并增加未来互联网的弹性。这是一个合作探索项目，汇集了来自密苏里-堪萨斯城大学、亚利桑那州立大学和日本大坂市立大学的研究人员。所有的研究成果都将提供给科学界。