Collaboration: A Survivable Information Infrastructure for National Civilian BioDefense

建议编号：CNS-0430276TITLE：国家民用生物防御的可生存信息基础设施PI：Cristina Nita-Rotaru该项目侧重于促进满足国家紧急响应系统关键要求的可生存信息基础设施的理论基础和协议。具体地说，该项目将解决以下挑战：(1)扩展现有的理论框架，以分析恶意和串通参与者的行为；(2)设计和构建可扩展的可生存消息传递系统，该系统在包括内部威胁和拒绝服务攻击的强大对手模型下正确运行；(3)设计和构建信息访问协议，以防止受到危害的数据库服务器提供错误数据或拒绝合法用户访问的服务器；以及(4)防止恶意用户学习未经授权的信息。这项工作的应用领域是临床医生生物防御网络(CBN)，这是一个基于互联网的全国性信息交换系统，旨在为临床医生在发生生物恐怖袭击后提供关键信息。CBN旨在缓解良性互联网故障并抵御对一个位置的物理攻击。然而，它无法在包括内部攻击在内的更强大的威胁模式下正确运行。这种更强大的威胁模型的解决方案目前还不可用，这是一个重大的研究挑战。本项目将构建一个基于CBN的可生存系统原型，并从中得出一般原理。它将开发坚实的理论基础和新颖的系统工具，以促进建立国家紧急网络，以便在最迫切需要这些网络的情况下，在危机情况下抵御网络攻击。

Proposal Number: CNS-0430276TITLE: A Survivable Information Infrastructure for National Civilian BioDefensePI: Cristina Nita-Rotaru This project focuses on the theoretical foundation and the protocols that facilitate a survivable information infrastructure that meets the critical requirements of a national emergency response system. Specifically, the project will address the following challenges:(1) expand the existing theoretical framework to analyze the behavior of malicious and colluding participants; (2) design and construct a scalable survivable messaging system that operates correctly under a strong adversarial model that includes insider threat and denial of service attacks; (3) design and construct information access protocols that protect against compromised database servers providing incorrect data or servers that deny access to legitimate users; and (4) prevent malicious users from learning unauthorized information. The domain of application for this work is the Clinicians' Biodefense Network (CBN), a nationwide Internet-based information exchange system designed to provide clinicians with critical information in the aftermath of a bioterrorist attack. The CBN is designed to mitigate benign Internet faults and to resist a physical attack on one location. However, it is not able to correctly operate under a stronger threat model that includes insider attacks. Solutions for this stronger threat model are not currently available and present a major research challenge. This project will construct a prototype survivable system based on the CBN, and from it draw general principles. It will develop a solid theoretical foundation and novel system tools to facilitate building national emergency networks that are resilient against cyber-attacks in crisis situations, when those networks are most urgently needed.