GENI: EAGER: GENI Experiments to Explore Adoption of New Security Services

GENI：EAGER：GENI 实验探索新安全服务的采用

• 批准号: 1152664
• 负责人: Karl Levitt
• 金额: $ 19.9万
• 依托单位: University of California-Davis
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-09-01 至 2014-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1152664&HistoricalAwards=false
• 关键词: GENI; EAGER; Experiments; Explore; Adoption

This EAGER project will carry out three classes of experiments on GENI, all related to security and privacy and all involving low-level network facilities. Of particular interest is the issue of adoptability: will real users (system administrators) accept novel security solutions and under what circumstances? Three experiments are proposed to address these challenges.The first experiment focuses on a monitoring system to detect infrastructure attacks: Currently, the protocol WATCHERS is known to be able to detect almost all attacks on routers, but its behavior under realistic network traffic is unknown. This experiment will ask questions like: What is the effect of monitoring on the infrastructure itself? How do the benefits of monitoring weighed against the cost of monitoring affect the adoption of the service by autonomous network entities?The second experiment is focused on attack mitigation with modified infrastructure services. Specifically, they will investigate how incremental adoption of a DNS protocol modification might affect the global domain name service when both standard and modified protocols operate simultaneously. Key questions are: Does a new infrastructure attack mitigation scheme interfere with the vulnerable service in widespread use? How do the new and old services compete with one another during the adoption phase?The third experiment focuses on distributed private online social networking. The PIs propose to explore deployment of secure and privacy-flexible p2p-client platforms for migrating from a centralized to a decentralized peer-to-peer social on-line network. The PIs are proposing to develop a social caching/name-resolution server, analogous to DNS for IP networks, to assist the p2p clients (or super peers) connected through GENI as they manage their privacy settings for their communities of interest. Key questions are: how can superpeers identify communities of interest and other social groups? Can they interface with centralized social networking frameworks, like facebook? Can they aid in the protection of privacy of their constituent clients?As for the broader impacts, GENI will be used for experimentation in six security-related university classes. The PIs also participate in the UC Davis COSMOS (Computer Security, Privacy, and Cybervillainy) program, which provides high achieving high school students the opportunity to explore advanced topics in math and science in a university setting. Laboratory experimentation is 30% of the COSMOS program curricula for which GENI will serve as an ideal platform.

这个EAGER项目将对GENI进行三类实验，所有这些实验都与安全和隐私有关，并且都涉及低级网络设施。特别令人感兴趣的是可采用性问题：真实的用户（系统管理员）会接受新的安全解决方案吗？在什么情况下？第一个实验主要研究一个监控系统来检测基础设施攻击：目前，WATCHERS协议被认为能够检测几乎所有对路由器的攻击，但它在现实网络流量下的行为是未知的。这个实验将提出这样的问题：监控对基础设施本身有什么影响？ 监控的好处与监控的成本如何权衡影响自治网络实体对服务的采用？第二个实验侧重于使用修改后的基础设施服务缓解攻击。具体来说，他们将研究当标准协议和修改后的协议同时运行时，DNS协议修改的增量采用如何影响全球域名服务。关键问题是：新的基础设施攻击缓解方案是否会干扰广泛使用的易受攻击服务？在采用阶段，新旧服务如何相互竞争？第三个实验的重点是分布式私人在线社交网络。PI建议探索部署安全和隐私灵活的P2P客户端平台，以便从集中式迁移到分散式点对点社交在线网络。PI建议开发一个类似于IP网络DNS的社交缓存/名称解析服务器，以帮助通过GENI连接的p2p客户端（或超级对等端）管理其感兴趣社区的隐私设置。关键问题是：超级同伴如何识别兴趣社区和其他社会群体？它们能与Facebook这样的集中式社交网络框架对接吗？他们能否帮助保护其成员客户的隐私？至于更广泛的影响，GENI将在六个与安全有关的大学班级中进行实验。PI还参加了加州大学戴维斯分校的COSMOS（计算机安全，隐私和网络犯罪）计划，该计划为成绩优异的高中生提供了在大学环境中探索数学和科学高级主题的机会。实验室实验是COSMOS计划课程的30%，GENI将作为理想的平台。