CSR-DMSS, SM: System Architecture for Resilient Internet Services

项目摘要建议书编号：0834357 PI：Anand TripathiCritical互联网上的基础设施服务受到攻击者不断增加的威胁。这个项目的目标是研究一个系统架构，用于建立高可用的互联网服务使用移动的代理范例。在这项研究中，移动的代理为基础的技术正在研究的关键组件在不同的域中的复制，动态再生的服务组件的情况下的攻击和故障，和分布式机制，积极监测组件的服务在不同的域。移动的基于代理的机制用于动态地复制、重新生成或将服务从一个域迁移到另一个域，以确保其持续可用性，认识到网络范围和服务级操作条件。基于移动的代理的技术还用于跨不同网络域检测和通知关键条件--例如故障、入侵和过载条件--以在因特网上建立弹性服务。安全覆盖网络用于将服务组件与客户端隔离，并用于提供对迁移服务的位置透明访问。覆盖网络还充当用于存储服务访问策略和不同通信模型的注册表。为了产生更广泛的影响，该项目旨在以实验系统的形式为研究基础设施做出贡献，作为构建和试验安全和弹性服务的试验平台。

Project AbstractProposal Number: 0834357PI: Anand TripathiCritical infrastructure services over the Internet are subject to constantly increasing threats posed by attackers. The goal of this project is to investigate a system architecture for building highly available Internet services using the mobile agent paradigm. In this research, mobile agent based techniques are being investigated for replication of critical components in different domains, dynamic regeneration of service components in case of attacks and failures, and distributed mechanisms to actively monitor the components of a service in different domains. Mobile agent-based mechanisms are utilized for dynamically replicating, regenerating, or migrating a service from one domain to another to ensure its continued availability, cognizant of network-wide and service-level operating conditions. Mobile agent based techniques are also used for detection and notification of critical conditions -- such as failures, intrusions, and overload conditions -- across different network domains for building resilient services over the Internet. A secure overlay network is used for isolating service components from clients, and for providing location-transparent access to migratory services. The overlay network also serves as a registry for storing service access policies and different communication models. Towards the broader impact, this projects aims to contribute to the research infrastructure in the form of an experimental system to serve as a testbed for building and experimenting with secure and resilient services.