SGER: Investigating Tradeoffs Between Security and Privacy in Overlay Distributed Systems

对等网络覆盖分布式系统中的一个重要问题是加强对存储在系统中的数据的信任，并保护节点的安全和隐私。然而，目前的研究从两个方面独立地解决了这个问题：隐私和安全。在隐私方面，研究人员的重点是提出匿名协议来隐藏节点的身份，以及如何防止攻击者泄露节点的身份。在安全方面，一个主要的研究重点是检测有意或无意扰乱P2P系统正常运行的节点的身份。如果节点可以完全隐藏自己的身份，匿名协议就有可能被滥用来威胁互联网的安全，增加节点的隐私意味着增加确保安全的难度。在这个项目中，PI进行研究，以了解并提供在P2P系统中平衡隐私和安全之间的权衡的解决方案。具体地说，(1)PI开发匿名通信协议来为P2P用户提供隐私保护，并提供安全保障；(2)PI以覆盖分布式拒绝服务和文件完整性作为安全问题的案例研究，开发了与隐私要求不冲突的技术安全解决方案；(3)通过开发平衡隐私和安全的安全解决方案，研究了广泛的安全问题。这个项目是与微软赞助的本科课程开发相结合的，在该课程中，网络安全和隐私、分散P2P系统的设计等重要主题正在进行studied.--------

One important problem in peer-to-peer (P2P) overlay distributed systems isto enforce the trust of the data stored in the system, and protect thesecurity and privacy of the peers. However, current research addressesthis problem in two directions with independent efforts: privacy andsecurity. In the privacy direction, researchers focus on proposinganonymity protocols to hide peers' identities and on how to prevent theattackers from revealing peers' identities. In the security direction, onemajor research focus is to detect the identities of peers who aresuspicious to disturb normal operations in P2P systems intentionally orunintentionally. If a peer can absolutely hide his/her identity, theanonymity protocol can be possibly abused to threat the Internet security.Increasing peers' privacy means increasing the difficulties to ensuresecurity. In this project, the PI conducts research to understand andprovide solutions on balancing the tradeoffs between privacy and securityin P2P systems. Specifically, (1) the PI develops anonymity communicationprotocols to provide privacy protection for P2P users with securityinsurance; (2) taking overlay distributed denial-of-service and fileintegrity as case studies for security issues, the PI develops technicalsecurity solutions without conflict with privacy requirements; (3) theresearch investigates a wide range of security issues by developingsecurity solutions to balance tradeoffs of privacy and security. Thisproject is integrated to a Microsoft sponsored undergraduate coursedevelopment, where important topics of networking security and privacy,design of decentralized P2P systems are being studied.----------------------------------------------------------