A Situation-Aware Information Infrastructure

复原力是通信系统和统一信通技术环境的一个重要属性，主要通过基础设施冗余、静态安全和网络控制（例如，通过多路径路由协议、基于签名的入侵检测系统）。这导致了大多数单一的解决方案，这些解决方案是特定于服务和位置的，并且它们保护基础设施免受一组静态和定义良好的威胁。然而，目前的方法并没有纳入，也没有利用，在今天的信息和通信技术环境中，如传感，日志，数据包，或外部的全球媒体饲料的时空信息的财富。这些来自不同环境的不同数据和信息源统一在ICT基础设施上，可用于建立态势感知，并有助于保护基础设施免受一系列动态和新出现的对抗性事件的影响（例如，从复杂性和集中化导致的新型故障，到拒绝服务攻击和自然灾害），这些都是当前静态方法无法提供的[1][2][3]。与此同时，当今的ICT环境正在演变为至关重要的、任务关键型的社会经济系统，它们的最佳性能取决于自适应和智能方案，以确保在合法或恶意对抗开始时的弹性操作事件为了实现这一目标，需要有一个合适的仪器，测量，分析和控制基础设施，将与本地操作，并增加智能，统一的网络环境。在这个项目中，我们建议设计和开发一个通用的，弹性和自适应的情况感知信息基础设施，预测和面对网络所面临的广泛的挑战。我们的目标是提供新的和实用的机制，这将使一个更深入的了解动态和非静态的关键任务系统的演变，通过利用“大数据”集的相关内部（监控）和外部（全球媒体饲料）时空信息-我们称之为“上下文”。我们的机制将被纳入一个软件定义的体系结构内的协议套件，集成为本地组件（未来）的计算机网络设计。该项目的目的不仅仅是将现成的解决方案纳入一个统一的计划，而是重新审视关键任务信通技术环境中的复原力挑战，并为这类工作的信息处理、算法、联网和系统方面提供新的解决方案。这项研究将在兰开斯特大学和格拉斯哥大学联合进行，为期两年，涉及具有广泛专业知识的调查人员（从弹性和自主通信，通过网络仪表和管理，信息检索），并与安全关键系统（NATS），工业控制网络（EADS-IW），和硬件加速定制计算产品（Solarflare）。该联盟将确保提供优秀的研究成果，并对未来的智能关键任务基础设施产生直接的工业适用性和变革性影响。[1]的文件。Windows Azure服务中断：http：//blogs.msdn.com/B/windowsazure/archive/2012/08/02/root-cause-analysis-for-recent-windows-azure-service-interruption-in-western-europe.aspx[2]。都柏林机场空中交通管理系统故障：http：//www.computerworld.com/s/article/9110319/都柏林_Airport_radar_system_brought_down_by_faulty_network_card[3]。伦敦数据中心停电：http://www.theregister.co.uk/2012/07/10/data_centre_power_cut/

Resilience is a vital property of communications systems and unified ICT environments, and is achieved mainly by infrastructural redundancy, and static security and network control (e.g., through multipath routing protocols, signature-based intrusion detection systems). This results in mostly monolithic solutions that are service and location-specific, and they protect the infrastructure against a static and well-defined set of threats. However, current approaches do not incorporate, nor do they take advantage of, the wealth of spatio-temporal information available in today's ICT environments, such as sensing, logs, packet data, or external global media feeds. Such diverse data and information sources from heterogeneous environments unified over ICT infrastructures can be exploited to create situation awareness, and can help protect the infrastructure from a range of dynamic and emerging adversarial events (e.g., from new types of failures due to complexity and centralisation, to denial of service attacks and natural disasters) that current static approaches fail to provide [1][2][3].At the same time, today's ICT environments are evolving as crucial, mission-critical socio-economic systems, and their optimal performance depends on adaptive and intelligent schemes to ensure resilient operation at the onset of legitimate or malicious adversarial events. In order to realise this aim, there needs to be a suitable instrumentation, measurement, analysis, and control infrastructure that will operate natively with, and add intelligence to, the unified networked environment. In this project, we propose to design and develop a generic, resilient and adaptive situation-aware information infrastructure that would predict and confront the broad range of challenges faced by the network. We aim to provide novel and practical mechanisms that will enable a deeper understanding of the dynamic and non-stationary evolution of mission-critical systems through harnessing 'big data' sets of relevant internal (monitored) and external (global media feeds) spatio-temporal information - what we call 'context'. Our mechanisms will be incorporated as a protocol suite within a Software-Defined architecture, integrated as a native component in (future) computer networks design. This project is not simply aiming at integrating off-the-shelf solutions into a unified scheme, but rather to revisit the resilience challenge in mission-critical ICT environments and contribute new solutions to the information processing, algorithmic, networking and systems aspects of such undertakings. The research will be carried out over two years jointly at the Universities of Lancaster and Glasgow, involving investigators with a wide range of expertise (from resilient and autonomic communications, through network instrumentation and management, to information retrieval) and in collaboration with a number of leading industrial partners in the areas of safety-critical systems (NATS), industrial control networks (EADS-IW), and hardware-accelerated custom computation products (Solarflare). This consortium will ensure delivery of excellent research results with direct industrial applicability and transformative effects on future intelligent mission-critical infrastructures. [1]. Windows Azure service interruption: http://blogs.msdn.com/b/windowsazure/archive/2012/08/02/root-cause-analysis-for-recent-windows-azure-service-interruption-in-western-europe.aspx[2]. Air Traffic Management system malfunction at Dublin Airport:http://www.computerworld.com/s/article/9110319/Dublin_Airport_radar_system_brought_down_by_faulty_network_card[3]. Power outage hits London Data Centre:http://www.theregister.co.uk/2012/07/10/data_centre_power_cut/