EAGER: Collaborative Research: A Secure and Resilient Virtual Trust Routing Framework for Future Internet

EAGER：协作研究：面向未来互联网的安全且有弹性的虚拟信任路由框架

• 批准号: 1029562
• 负责人: Deep Medhi
• 金额: $ 11.7万
• 依托单位: University of Missouri-Kansas City
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-05-01 至 2013-10-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1029562&HistoricalAwards=false
• 关键词: EAGER; Collaborative; Research; Secure; Resilient

Current network-centric Internet service model is prone toresource exhausting attacks such as Distributed Denial ofServices attacks. Due to the resource sharing nature andnon-coordinated monitoring capability of the current Internet,it is difficult to quickly identify attack sources. Second, anew trend is to develop a user-centric Internet service model,in which traditional local network services are outsourced toremote service providers such as for cloud services. This newtrend allows end users to fully control remote service nodes,their interconnections and routing, which imposes great threatson network resource allocations. Thus, it is highly desiredthat the future Internet is designed to provide a secureservice domain that is both network-centric and user-centric.As a fundamental core to this goal, a secure and resilientvirtualized routing architecture in a global inter-networkingenvironment is explored to provide network resource reservationprotection both at the network-centric and the user-centriclevel. A novel attribute-based, cryptography-based approach toconstruct secure virtualization is to be developed.Furthermore, an architectural solution to address the policyenforcement and inter-domain trust management is alsoconsidered. The end goal is to greatly improve the efficiencyof attack monitoring and intrusion detection and to increasethe resiliency of the future Internet. This is a collaborativeexploratory project bringing together researchers from theUniversity of Missouri-Kansas City, Arizona State University,and Osaka City University, Japan. All research results will bemade available to the scientific community.

当前以网络为中心的Internet服务模式容易受到分布式拒绝服务攻击等资源耗尽攻击。由于当前互联网的资源共享性和非协同监控能力，很难快速识别攻击源。其次，新的趋势是发展以用户为中心的互联网服务模式，将传统的本地网络服务外包给远程服务提供商，如云服务。这一新趋势允许终端用户完全控制远程服务节点及其互连和路由，这对网络资源分配构成了巨大的威胁。因此，人们迫切希望未来的互联网能够提供一个以网络为中心、以用户为中心的安全预留服务域。作为这一目标的基本核心，在全球互联网络环境中探索一种安全的、具有弹性的虚拟路由体系结构，以提供以网络为中心和以用户为中心的网络资源预留保护。提出了一种新的基于属性、基于密码学的安全虚拟方法，并提出了一种解决策略执行和域间信任管理的体系结构方案。最终目标是极大地提高攻击监控和入侵检测的效率，并增加未来互联网的弹性。这是一个合作探索性项目，汇集了来自密苏里大学堪萨斯城分校、亚利桑那州立大学和日本大阪城市大学的研究人员。所有的研究成果都将提供给科学界。