CT-ISG: Amplifying both security and reliability

在接下来的几年里，下一代互联网的基本架构将会确定，希望更多地强调安全。在网络中，安全和通信是相互依赖的。将需要加密工具来确保通信是可靠的，尽管黑客进行了拒绝服务攻击和其他破坏。另一方面，适当的通信体系结构可以提供原语，使强大的安全密码工具，如安全多方计算，足够有效地实现。遗憾的是，传统上对网络中可靠通信和计算的研究没有考虑安全性，反之亦然。这项研究考察了一种通信渠道模型，该模型以稳健的方式包含了安全考虑。在该模型中，协议可以同时针对保密性和可靠性这两个双重目标进行评估。该模型从密码学、分布式系统和纠错的角度统一了以前解决这些问题的方法。该模型还将信息论技术(基于攻击者无法访问特定信息的安全性)与复杂性理论方法(基于攻击者无法解决棘手的计算问题)相结合。将探索从具有较弱属性的频道到具有较强属性(增加的私密性、认证或可靠性)的频道的可能构造。例如，是否可以采用仅向目标接收者提供的信息比向攻击者提供的信息略多的任意通道，并使用它来建立高度可靠且几乎完全保密的通道？我们是否可以使用秘密、可靠的通信通道来创建模拟虚拟广播的通道？保密和匿名性之间有什么关系？

Over the next few years, the basic architecture of the next generation of Internet will be decided, hopefully with a much greater emphasis on security. In a network, security and communication are interdependent. Cryptographic tools will be required to ensure that communication is dependable despite hackers' denial-of-service attacks and other sabotage. On the other hand, proper communications architecture could provide primitives that make powerful cryptographic tools for security, such as secure multiparty computation, e_cient enough to be implemented. Unfortunately, research on reliable communications and computation in a network has traditionally been studied without consideration of security, and vice versa. This research examines a model of communication channels that includes security considerations in a robust way. In this model, protocols can be simultaneously evaluated for the two dual objectives of secrecy and reliability. This model unites previous approaches to these questions from the points of view of cryptography, distributed systems, and error-correction. The model also unites information-theoretic techniques (with security based on the attacker's inability to access certain information) with complexitytheoretic approaches (based on the attacker's inability to solve intractable computational problems). Possible constructions of channels with stronger properties (increased privacy, authentication, or reliability) from those with weaker properties will be explored. For example, is it possible to take an arbitrary channel that gives only slightly more information to the intended receiver than to an attacker and use it to build a highly reliable and almost completely secret channel? Can we use a channel for secret, reliable communication to create a channel emulating a virtual broadcast? What is the relationship between secrecy and anonymity?