CAREER: GAIA: A Self-organizing, Self-healing Network Infrastructure

互联网规模应用的未来依赖于安全连接分布式资源，如企业数据中心、视频会议站点和分布式web缓存。不幸的是，今天的互联网非常不适合分布式应用程序。每天都有新的病毒和蠕虫被发现，并不断利用软件和网络漏洞威胁终端主机。与此同时，管理员也在不断地竞争，以确保机器在受到威胁之前的安全。该项目的目标是研究自我修复网络基础设施的设计和部署，该基础设施允许分布式应用程序在这种环境中生存，同时保持可用性，同时抵抗来自受损内部主机和外部攻击者的攻击。该项目侧重于主动避免与可疑网络实体的交互，以及从内部和外部攻击中被动检测和恢复。与终端主机或基于协议的方法相比，我们的方法在尝试维持长期应用程序可用性方面是独一无二的，尽管假设终端主机是不安全的，并且会不断受到攻击和损害。PI正在结构化的点对点覆盖之上构建Gaia基础设施，并利用覆盖路由来实现可扩展的通信原语。

Ben ZhaoUniversity of California, Santa Barbara0546216AbstractThe future of Internet-scale applications relies on securely connectingdistributed resources such as corporate data centers, video-conferencingsites, and distributed web caches. Unfortunately, today's Internet is extremely inhospitable for distributedapplications. New viruses and worms are discovered on a daily basis, andconstantly threaten to compromise end hosts by exploiting software andnetwork vulnerabilities. Meanwhile, administratorsare in a constant race to secure machines before they are compromised.The objective of this project is to investigate the design and deployment ofa self-healing network infrastructure that allows distributed applications tosurvive in this environment by maintaining availability while resistingattacks from compromised internal hosts and external attackers. The projectfocuses on both proactively avoiding interactions with suspicious networkentities, and reactively detecting and recovering from internal and externalattacks. Compared to end-host or protocol based approaches, our approach is unique intrying to maintain long-term application availability despite the assumptionthat end hosts are insecure and will be continuously attacked andcompromised. The PI is building the Gaia infrastructure on top of a structuredpeer-to-peer overlay and leverage overlay routing for our scalablecommunication primitive.