CAREER: Personal Virtual Networks

我们的移动设备（如手机）经常遇到并连接到多个网络，以保持无缝通信，从而实现我们越来越依赖的各种服务，如互联网接入、短信、社交媒体访问和娱乐。然而，这种无处不在的网络连接引起了许多重要的关注。例如，我们的设备经常通过它们不完全信任的网络发送数据，这些网络不在我们的控制之下，这可能导致安全漏洞、服务质量差和侵犯隐私。为了解决这些问题，本提案寻求开发个人虚拟网络，即vpn，为每个设备提供自己的网络，该网络提供商可以提供可定制的安全性和隐私性。该建议引入了无处不在的vpn的思想，可以配置为跨不受信任的异构网络提供隐私、安全性和性能。vpn将允许设备在网络提供商内部建立可信的网络配置，为网络流量定义策略，甚至使用软件中间件环境部署有限的代码来干预其流量。通过安全灵活的接口将网络内的资源提供给设备使用，为用户提供更加安全、灵活、私有和高性能的网络体验。提出的工作将设计一个新的体系结构，以及抽象和原语，以提供安全、灵活和可移植的用户定义网络策略。为了支持在不可信环境中的部署，该项目将包括开发用于审计不可信网络中的PVN部署的新算法和网络测量，以及设计在可信硬件上提供可证明的隐私和安全保证的新框架。最后，建议的工作将开发和实施由pvn支持的新应用和服务的实证评估。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Our mobile devices (e.g. cellphones) regularly encounter and connect to multiple networks to maintain seamless communication, enabling the variety of services we increasingly rely on, such as Internet access, text messaging, social media access, and entertainment. However, such ubiquitous network connections raise a number of important concerns. For example, our devices regularly send data over networks they do not fully trust and that are not under our control, which can lead to security vulnerabilities, poor service, and privacy violations. To address these issues, this proposal seeks to develop Personal Virtual Networks, or PVNs, that provide each device with its own network within a network provider that can provide customizable security and privacy. This proposal introduces the idea of ubiquitous PVNs that can be configured to provide privacy, security and performance across untrusted heterogeneous networks. PVNs will allow devices to establish trusted network configurations inside of network providers, define policies for network traffic, and even deploy limited code that interposes on their traffic using a software middlebox environment. By making in-network resources available to devices via a secure and flexible interface, PVNs can enable more secure, flexible, private, and performant network experiences for users. The proposed work will design a new architecture, as well as abstractions and primitives for providing safe, flexible, and portable user-defined network policies. To support deployments in untrusted environments, this project will include the development of new algorithms and network measurements for auditing PVN deployments in untrusted networks, as well as the design of new frameworks that provide provable privacy and security guarantees atop trusted hardware. Last, the proposed work will develop and conduct empirical evaluations of new applications and services that are enabled by PVNs.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.