SGER: Investigating Tradeoffs Between Security and Privacy in Overlay Distributed Systems

在点对点（P2P）覆盖分布式系统中，一个重要的问题是加强对系统中存储的数据的信任，并保护节点的安全性和隐私性。然而，目前的研究在两个方向上解决了这个问题：隐私和安全。在隐私方面，研究人员专注于提出匿名协议来隐藏同伴的身份，以及如何防止攻击者泄露同伴的身份。在安全方向上，一个主要的研究重点是检测有意或无意干扰P2P系统正常运行的可疑节点的身份。如果一个对等体可以绝对隐藏他/她的身份，匿名协议就有可能被滥用，威胁到互联网的安全。增加对等体的隐私意味着增加安全保障的难度。在这个项目中，PI进行研究，了解并提供解决方案，在P2P系统中平衡隐私和安全之间的权衡。具体而言，(1)PI开发匿名通信协议，为P2P用户提供隐私保护和安全保险；(2)以覆盖分布式拒绝服务和文件完整性作为安全问题的案例研究，PI开发了与隐私要求不冲突的技术安全解决方案；(3)本研究通过开发安全解决方案来平衡隐私和安全的权衡，调查了广泛的安全问题。该项目整合到微软赞助的本科课程开发中，该课程正在研究网络安全和隐私，分散P2P系统的设计等重要主题。----------------------------------------------------------

One important problem in peer-to-peer (P2P) overlay distributed systems isto enforce the trust of the data stored in the system, and protect thesecurity and privacy of the peers. However, current research addressesthis problem in two directions with independent efforts: privacy andsecurity. In the privacy direction, researchers focus on proposinganonymity protocols to hide peers' identities and on how to prevent theattackers from revealing peers' identities. In the security direction, onemajor research focus is to detect the identities of peers who aresuspicious to disturb normal operations in P2P systems intentionally orunintentionally. If a peer can absolutely hide his/her identity, theanonymity protocol can be possibly abused to threat the Internet security.Increasing peers' privacy means increasing the difficulties to ensuresecurity. In this project, the PI conducts research to understand andprovide solutions on balancing the tradeoffs between privacy and securityin P2P systems. Specifically, (1) the PI develops anonymity communicationprotocols to provide privacy protection for P2P users with securityinsurance; (2) taking overlay distributed denial-of-service and fileintegrity as case studies for security issues, the PI develops technicalsecurity solutions without conflict with privacy requirements; (3) theresearch investigates a wide range of security issues by developingsecurity solutions to balance tradeoffs of privacy and security. Thisproject is integrated to a Microsoft sponsored undergraduate coursedevelopment, where important topics of networking security and privacy,design of decentralized P2P systems are being studied.----------------------------------------------------------