Nets: Small: Optimal Design of Anonymous Network Systems under Resource Constraints

网络系统中的隐私不仅仅是交换数据的保密性；保护通信方的身份和数据流的路径同样重要。此类网络信息的可获得性不仅是对用户隐私的侵犯，也为恶意对手发动更强大的攻击提供了便利的平台。匿名网络系统是由特殊路由器和代理服务器组成的网络，它们使用加密工具和秘密中继提供保护。然而，通常部署的系统容易受到分组传输的时序分析的影响，并且在资源受限的情况下不能提供必要的保护。主要调查人员将研究在资源和期望的网络服务质量(Qos)约束下匿名网络系统的可证明最优设计。他们将开发一种新的匿名量化措施，该措施考虑到对手可获得的完整信息以及网络的资源和拓扑限制。使用定量模型，他们将探索网络系统设计中的以下三个关键问题：最优资源分配、随机路由和拓扑设计。如果成功，这项分析将产生新的网络算法，以实现信息交换中的匿名性，以迎合现代网络设计范式，如移动性和应用独立性。广泛影响：该研究将对为网络系统提供可证明的隐私产生重大影响。该研究促进了网络安全方面的研究生和本科生教育，并通过远程学习计划为社区大学生和执法人员提供了接触该领域最新进展的途径。此外，还将扩大初中生对社交网络安全漏洞的认识。

Privacy in networked systems goes beyond the secrecy of exchanged data; it is equally critical to protect the identities of communicating parties and the paths of data flow. Availability of such networking information is not only a violation of user privacy, but also provides a convenient platform for a malicious adversary to launch more powerful attacks. Anonymous network systems are networks of special routers and proxy servers that provide protection using cryptographic tools and covert relaying. Commonly deployed systems are, however, vulnerable to timing analysis of packet transmissions and do not provide the necessary protection under resource limitations.The principal investigators will investigate the provably optimal design of anonymous network systems under constraints on resources and desired network quality of service (QoS). They will develop a novel quantitative measure of anonymity that takes into account the complete information available to an adversary and the resource and topological constraints of a network. Using the quantitative model, they will explore the following three critical problems in network system design: optimal resource allocation, stochastic routing, and topological design. If successful, the analysis will give rise to novel networking algorithms to achieve anonymity in information exchange that cater to modern paradigms of network design such as mobility and application independence.Broader Impact: The research will have a significant impact in delivering provable privacy for networked systems. The research promotes graduate and undergraduate education in network security and provides access to recent advances in the field to community college students and law enforcement personnel through distance learning programs. In addition, awareness of security vulnerabilities in social networks will be broadened for middle to high school students.