SDI-CSCS: EP3: A Clean-Slate Software-Defined Approach for Enabling Elastic Security

SDI-CSCS：EP3：用于实现弹性安全的全新软件定义方法

• 批准号: 1700521
• 负责人: Srinivasan Seshan
• 金额: $ 200万
• 依托单位: Carnegie-Mellon University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-09-01 至 2022-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1700521&HistoricalAwards=false
• 关键词: SDI; CSCS; EP3; Clean; Slate

This project explores a clean-slate approach to securing critical services in emerging Software-Defined computing and networking systems Infrastructure (SDI). The project explores a new, elastic and flexible security approach as part of a proposed Elastic Placement, Posture and Performance (EP3) framework. In EP3, elasticity applies to the amount of processing available to perform security tasks, as well as to the types of policy and the placement where the processing occurs. The proposed research addresses flexible security infrastructure in three ways. First, a research thrust will design a data plane with greater verifiability and confidentiality associated with in-network computation tasks. This gives network administrators greater flexibility in moving security critical processing to anywhere in the network. A second research task will be to develop a control plane that leverages placement flexibility to dynamically launch defenses as needed. Finally, the project team will develop a set of novel SDI-inspired security capabilities that highlight the benefits of elasticity in placement, posture and performance.This research activity will develop and disseminate a set of open-source tools, modeling abstractions, algorithm designs, and prototype implementations that will dramatically reduce the time to deploy their techniques in current and future SDI deployments. The project team will also make the research results useful as an educational resource for students, and plan to integrate the outputs of the interdisciplinary research in key course projects in multiple classes spanning security, networking, and systems. The project will actively encourage research participation from underrepresented groups, and work closely with leading industry collaborators to evaluate the proposed techniques and deploy the solutions in operational settings.

该项目探讨了在新兴软件定义的计算和网络系统基础架构（SDI）中确保关键服务的清洁式方法。该项目探讨了一种新的，弹性和灵活的安全方法，作为拟议的弹性放置，姿势和性能（EP3）框架的一部分。在EP3中，弹性适用于可用于执行安全任务的处理量，以及策略的类型和处理的位置。拟议的研究通过三种方式解决了灵活的安全基础架构。首先，研究推力将设计具有与网络内计算任务相关的更验证性和机密性的数据平面。这为网络管理员提供了更大的灵活性，可以将关键处理关键处理转移到网络中的任何地方。第二项研究任务将是开发一个控制平面，该控制平面利用放置灵活性根据需要动态启动防御。最后，项目团队将开发一系列新型的SDI启发的安全功能，突出弹性在放置，姿势和性能方面的好处。这项研究活动将开发和传播一系列开源工具，建模抽象，算法设计，以及将在当前和未来Sddi demption Sddi demplys inthersiques in Persimate inthersiques in ploseptions and Implotation and Implotation and Implotation and emate tements的实现。项目团队还将使研究结果可作为学生的教育资源，并计划在跨越安全，网络和系统的多个类中的关键课程项目中整合跨学科研究的输出。该项目将积极鼓励代表性不足的小组的研究参与，并与领先的行业合作者紧密合作，以评估拟议的技术并将解决方案部署在运营环境中。

项目成果

Finding Invariants of Distributed Systems: It's a Small (Enough) World After All

寻找分布式系统的不变量：世界毕竟很小（足够）

• 发表时间: 2021
• 期刊: 18th USENIX Symposium on Networked Systems Design and Implementation (NSDI 21
• 作者: Hance, Travis;Heule, Marijn;Martins, Ruben;Parno, Bryan
• 通讯作者: Parno, Bryan

Jaqen: A High-Performance Switch-Native Approach for Detecting and Mitigating Volumetric DDoS Attacks with Programmable Switches

• 发表时间: 2021
• 作者: Zaoxing Liu;Hun Namkung;G. Nikolaidis;Jeongkeun Lee;Changhoon Kim;Xin Jin;V. Braverman;Minlan Yu-Minlan

SketchLib: Enabling Efficient Sketch-based Monitoring on Programmable Switches

SketchLib：在可编程交换机上实现基于草图的高效监控

• 发表时间: 2022
• 期刊: 19th USENIX Symposium on Networked Systems Design and Implementation (NSDI 22
• 作者: Namkung, Hun;Liu, Zaoxing;Kim, Daehyeok;Sekar, Vyas;Steenkiste, Peter
• 通讯作者: Steenkiste, Peter

Generic External Memory for Switch Data Planes

• DOI: 10.1145/3286062.3286063
• 发表时间: 2018-11
• 期刊: Proceedings of the 17th ACM Workshop on Hot Topics in Networks
• 作者: Daehyeok Kim;Yibo Zhu;Changhoon Kim;Jeongkeun Lee;S. Seshan

Don't Yank My Chain: Auditable NF Service Chaining

• 发表时间: 2021
• 期刊: Fatigue & Fracture of Engineering Materials & Structures
• 影响因子: 3.7
• 作者: Guyue Liu;Hugo Sadok;Anne Kohlbrenner;Bryan Parno;Vyas Sekar;Justine Sherry