GENI: EAGER: GENI Experiments to Explore Adoption of New Security Services

GENI：EAGER：GENI 实验探索新安全服务的采用

• 批准号: 1152320
• 负责人: George Kesidis
• 金额: $ 10万
• 依托单位: Pennsylvania State Univ University Park
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-09-01 至 2014-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1152320&HistoricalAwards=false
• 关键词: GENI; EAGER; Experiments; Explore; Adoption

This EAGER project will carry out three classes of experiments on GENI, all related to security and privacy and all involving low-level network facilities. Of particular interest is the issue of adoptability: will real users (system administrators) accept novel security solutions and under what circumstances? Three experiments are proposed to address these challenges.The first experiment focuses on a monitoring system to detect infrastructure attacks: Currently, the protocol WATCHERS is known to be able to detect almost all attacks on routers, but its behavior under realistic network traffic is unknown. This experiment will ask questions like: What is the effect of monitoring on the infrastructure itself? How do the benefits of monitoring weighed against the cost of monitoring affect the adoption of the service by autonomous network entities?The second experiment is focused on attack mitigation with modified infrastructure services. Specifically, they will investigate how incremental adoption of a DNS protocol modification might affect the global domain name service when both standard and modified protocols operate simultaneously. Key questions are: Does a new infrastructure attack mitigation scheme interfere with the vulnerable service in widespread use? How do the new and old services compete with one another during the adoption phase?The third experiment focuses on distributed private online social networking. The PIs propose to explore deployment of secure and privacy-flexible p2p-client platforms for migrating from a centralized to a decentralized peer-to-peer social on-line network. The PIs are proposing to develop a social caching/name-resolution server, analogous to DNS for IP networks, to assist the p2p clients (or super peers) connected through GENI as they manage their privacy settings for their communities of interest. Key questions are: how can superpeers identify communities of interest and other social groups? Can they interface with centralized social networking frameworks, like facebook? Can they aid in the protection of privacy of their constituent clients?As for the broader impacts, GENI will be used for experimentation in six security-related university classes. The PIs also participate in the UC Davis COSMOS (Computer Security, Privacy, and Cybervillainy) program, which provides high achieving high school students the opportunity to explore advanced topics in math and science in a university setting. Laboratory experimentation is 30% of the COSMOS program curricula for which GENI will serve as an ideal platform.

该EAGER项目将在GENI上开展三类实验，均与安全和隐私相关，均涉及低级网络设施。特别令人感兴趣的是可采用性问题：实际用户（系统管理员）会接受新的安全解决方案吗？在什么情况下？提出了三个实验来解决这些挑战。第一个实验集中在检测基础设施攻击的监控系统上：目前，已知协议WATCHERS能够检测到几乎所有对路由器的攻击，但其在现实网络流量下的行为尚不清楚。这个实验将提出这样的问题：监控对基础设施本身的影响是什么？监控的好处与监控的成本之间的权衡如何影响自治网络实体对服务的采用？第二个实验的重点是通过修改基础设施服务减轻攻击。具体来说，他们将研究当标准协议和修改后的协议同时运行时，DNS协议修改的增量采用如何影响全球域名服务。关键问题是：新的基础设施攻击缓解方案是否会干扰广泛使用的脆弱服务？在采用阶段，新旧服务如何相互竞争？第三个实验的重点是分布式私人在线社交网络。pi建议探索部署安全和隐私灵活的p2p客户端平台，用于从集中式到分散的点对点社交在线网络的迁移。pi提议开发一个社交缓存/名称解析服务器，类似于IP网络的DNS，以帮助通过GENI连接的p2p客户端（或超级对等端）管理他们感兴趣的社区的隐私设置。关键问题是：超级同伴如何识别感兴趣的社区和其他社会群体？它们能与中心化的社交网络框架（如facebook）交互吗？他们能帮助保护他们的客户的隐私吗？至于更广泛的影响，GENI将用于六个与安全相关的大学课程的实验。这些pi还参加了加州大学戴维斯分校的COSMOS（计算机安全、隐私和网络犯罪）项目，该项目为成绩优异的高中生提供了在大学环境中探索数学和科学高级主题的机会。实验室实验占COSMOS项目课程的30%，GENI将作为一个理想的平台。