CT-ISG: Trustworthy Network Eavesdropping and Countermeasures (TNEC)

建议编号：0524047PI：布雷泽，马修研究所：宾夕法尼亚大学标题：可信网络窃听与对策(TNEC)TNEC项目从窃听者的角度研究互联网流量拦截问题。它调查了使依赖网络进行保密是不明智的特性，是否可以颠覆这些特性来有效地阻止窃听。网络拦截通常被认为是一个敏感问题--防止流量“规避”。另一方面，在技术经济合作中，重点是针对误导性噪声的选择性。该项目引入了一个名为“混淆”的新概念，即第二方或第三方将人工噪声定向到难以与目标流量区分的窃听者。混淆具有不需要通信方进行端到端合作即可实现抗窃听的新特性。TNEC将形式化混淆，并研究特定网络和窃听配置对混淆技术的敏感性，从而产生工具，即使在存在主动对策的情况下，也可以测量和量化截获的流量流的“保真度”。更广泛地说，该项目将检查网络体系结构是否加剧了混乱，可能导致网络本质上拒绝窃听，而不需要端到端加密。

AbstractProposal Number: 0524047PI: Blaze, Matthew Institution: University of PennsylvaniaTitle: Trustworthy Network Eavesdropping & Countermeasures (TNEC)The TNEC project examines the problem of Internet traffic interception from the point of view of the eavesdropper. It investigates whether the very properties that make it unwise to depend on networks for confidentiality can be turned on their head to effectively frustrate eavesdropping.Network interception is usually framed as a problem of sensitivity -- preventing traffic "evasion." In TNEC, on the other hand, the focus is on selectivity against misleading noise. The project introduces a new concept, called "confusion," in which a second- or third- party directs artificial noise at the eavesdropper that is difficult to distinguish from targets' traffic. Confusion has the novel property that it does not require end-to-end cooperation by the communicating parties in order to achieve eavesdropping resistance.TNEC will formalize confusion and study specific networks and eavesdropping configurations for susceptibility to confusion techniques, leading to tools for measuring and quantifying the "fidelity" of intercepted traffic streams even in the presence of active countermeasures. More broadly, the project will examine the network architectures for exacerbating confusion, possibly leading to networks that inherently resist eavesdropping without the need for end-to-end encryption.