TC: Large: Collaborative Research: High-Level Language Support for Trustworthy Networks

TC：大型：协作研究：对可信赖网络的高级语言支持

• 批准号: 1111520
• 负责人: David Walker
• 金额: $ 140万
• 依托单位: Princeton University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-08-01 至 2016-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1111520&HistoricalAwards=false
• 关键词: TC; Large; Collaborative; Research; Level

Computer networks are now, arguably, the United States' most critical infrastructure. They control all communication amongst our citizenry, our businesses, our government, and our military. Worryingly, however, today's networks are remarkably unreliable and insecure. A significant source of vulnerability is the fact that the underlying network equipment (e.g., routers and switches) run complicated programs written in obtuse, low-level programming languages, which makes managing networks a difficult and error-prone task. Simple mistakes can have disastrous consequences including making the network vulnerable to denial-of-service attacks, hijackings, and wide-scale outages.The goal of this research is to transform the way that networks are managed by introducing a new class of network programming languages with the following essential features: (i) network-wide, correct-by-construction abstractions; (ii) support for fault-tolerance and scalability; (iii) coordination with end-hosts and independently-administered networks, as well as mechanisms for establishing trust between them; (iv) formal verification tools based on rigorous semantic foundations; and (v) compilers capable of generating efficient and portable code that runs on heterogeneous equipment. To demonstrate how to build a language with these features, the researchers are designing a language for OpenFlow networks called Frenetic, and evaluating it on several novel security applications. This project will have broad impact by (i) discovering key techniques for increasing the reliability of our networks, (ii) opening up the interfaces used to program networks, thereby enabling grass-roots innovation where it was previously not possible, and (iii) educating a new community of researchers with advanced skills in both networking and programming languages.

现在，计算机网络现在可以说是美国最关键的基础架构。 他们控制了我们的公民，我们的企业，我们的政府和军​​队之间的所有沟通。 然而，令人担忧的是，当今的网络非常不可靠和不安全。 一个重要的脆弱性来源是，基础网络设备（例如路由器和开关）运行以钝的，低级编程语言编写的复杂程序，这使得管理网络成为困难且容易出错的任务。简单的错误可能会带来灾难性的后果，包括使网络容易受到拒绝服务攻击，劫持和大规模的中断。这项研究的目的是通过引入以下基本功能来改变网络的管理方式：（i）网络范围内的基本功能：（i）跨网络，正确的，宽结构的构建效果； （ii）支持容忍和可伸缩性； （iii）与最终主持人和独立管理的网络的协调，以及在它们之间建立信任的机制； （iv）基于严格的语义基础的正式验证工具； （v）能够生成在异构设备上运行的高效和便携式代码的编译器。为了演示如何使用这些功能构建一种语言，研究人员正在为称为Frenetic的OpenFlow网络设计一种语言，并在几个新颖的安全应用程序上对其进行评估。该项目将通过（i）发现提高网络可靠性的关键技术会产生广泛的影响；