CAREER: Evidence in Federated Distributed Systems

职业：联邦分布式系统的证据

• 批准号: 1054229
• 负责人: Andreas Haeberlen
• 金额: $ 50.86万
• 依托单位: University of Pennsylvania
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-02-01 至 2018-01-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1054229&HistoricalAwards=false
• 关键词: CAREER; Evidence; Federated; Distributed; Systems

There is an increasing trend towards federated distributed systems, i.e., systems that are operated jointly by multiple different organizations or individuals. The interests of the participants in such a system are often highly diverse and/or in conflict with one another; for example, participants may be business competitors or based in hostile nations. Thus, federated systems are inherently vulnerable to insider attacks: the participants can try to subvert the system, exploit it for their own benefit, or attack other participants.However, the participants in a federated system are typically connected in the 'offline world' as well, e.g., through social networks or business relationships. This context can be leveraged to handle misbehavior through well-known, time-tested techniques like accountability and transparency. For example, if one participant can detect and prove that another participant has misbehaved, she can sue that participant for breach of contract.The goal of this research is to develop a key technology for enabling this approach, namely a reliable and general way to generate and verify evidence of misbehavior in federated systems. The project (i) studies the fundamental tradeoffs, requirements, and inherent costs of creating evidence; (ii) develops new algorithms for efficiently supporting different kinds of evidence; and (iii) evaluates these algorithms in the context of practical systems.The project is integrated with Penn's new undergraduate program in Market and Social Systems Engineering. It will produce and freely distribute software that can be used to defend federated systems against attacks and malicious insiders.

有一个日益增长的趋势，联邦分布式系统，即，由多个不同的组织或个人共同操作的系统。在这样一个系统中，参与者的利益往往是高度多样化和/或相互冲突的;例如，参与者可能是商业竞争对手或位于敌对国家。因此，联邦系统天生容易受到内部攻击：参与者可以试图破坏系统，利用它为自己的利益，或攻击其他参与者。然而，联邦系统中的参与者通常也在“离线世界”中连接，例如，通过社交网络或商业关系。可以利用这种背景来处理不当行为，通过众所周知的，经过时间考验的技术，如问责制和透明度。例如，如果一个参与者可以检测并证明另一个参与者有不当行为，她可以起诉该参与者违反contract.The本研究的目标是开发一个关键技术，使这种方法，即一个可靠的和通用的方法来生成和验证联邦系统中的不当行为的证据。该项目（i）研究基本的权衡，要求和创建证据的固有成本;（ii）开发新的算法，有效地支持不同类型的证据;（iii）在实际系统的背景下评估这些算法。该项目与宾夕法尼亚大学新的市场和社会系统工程本科课程相结合。它将生产和免费分发可用于保护联邦系统免受攻击和恶意内部人员攻击的软件。