MRI: Acquisition of a Data Center Testbed for Security and Resilience Research

本项目采购一台数据中心仪器，旨在进行安全性和弹性方面的研究。目标是设计和验证具有高可扩展性、良好灵活性和低复杂性的安全架构，并开发和验证系统的弹性方案，为各种应用提供差异化的弹性，并优化故障恢复。该项目还侧重于新型混合安全架构（HSA）的部署，该架构将安全与路由分离，并使安全设备能够在DCN中完全分布，而不受网络拓扑和路由方案的影响。这一特性有望使周界防御模型成为一种将安全检查和实施更加集成到数据中心结构中的模型。该工具将用于研究应用程序和较低网络层之间交互的建模。此外，它将用于设计它们之间的协议和接口，开发qos感知的快速故障恢复算法，以及改进应用层故障反应。提议的工具可以极大地影响安全数据中心（特别是多租户数据中心）向更高容量和更好的服务供应的发展。该项目的结果将通过出版物传播。拟议的软件和硬件模块有望鼓励研究和商业化。拟议的工具将极大地影响教育和学生培训，并有望与该机构以外的研究界共享。

This project, acquiring a data center instrument, aims to conduct research on security and resilience. The goal is to design and verify a security architecture that features high scalability, good flexibility, and low complexity, and to develop and verify a systematic resilience scheme to provide differentiated resilience to various applications and optimize the failure recovery. The project also focuses on the deployment of the novel, hybrid security architecture (HSA), which decouples security from routing and enables the full distribution of the security devices in the DCN regardless of network topologies and routing schemes. This feature is expected to enable the perimeter defense model to become one in which the security checking and enforcement is much more integrated into the data center fabric.The instrument will be used to study the modeling of the interactions between the application and lower networking layers. In addition, it will be used to design the protocols and interfaces between them, to develop QoS-aware fast failure recovery algorithms, as well as improve the application layer failure reactions.The proposed instrument can greatly impact the evolution of secure data centers (in particular, multi-tenant data centers) toward higher capacity and better service provisioning. The results of the project will be disseminated via publications. The proposed software and hardware modules are expected to encourage research and commercialization. The proposed instrument should greatly impact education and student training, and is expected to also be shared with the research community also outside the institution.