CAREER: anon.next: Privacy-Enabled Routing in the Next-Generation Internet

像Tor这样的覆盖匿名系统可以有效地对抗许多类型的隐私攻击，但它们的网络性能比常规互联网流量要慢得多。这个项目的目的是探索建筑的设计。其次是下一代互联网的匿名系统。在anonymous .next中，我们将匿名代理嵌入到新的互联网架构中，这样网络本身就可以提供覆盖设计无法提供的高效和有效的隐私保护。该项目寻求在两个领域取得重大进展，这两个领域对anonymous .next的设计至关重要。首先，构建匿名代理的吞吐量路径的方法，将用户的数据包路由到其目的地，同时最小化隐私泄漏。其次，安全的方法来定位这些代理，而不依赖于集中式目录服务器或暴露用户的数据包路由。这两个组件都要求我们为给定的匿名路径和整个系统提供的隐私开发新的度量标准。我们正在进行分析和模拟研究，并通过在GENI测试台上进行大量实验来验证这些研究。这些努力将为匿名系统的设计提供重要的见解，匿名系统提供个人隐私，以及对举报人、记者和情报机构的审查和保护。我们的项目也是理解和设计下一代互联网分布式系统所需的大量工作的一部分。这个项目涉及到很多层次的学生，包括参加夏令营的中学生和高中生，研究发现针对我们系统的新攻击的本科生，以及研究生。

Overlay anonymity systems like Tor are effective against many kinds of attackson privacy, but they have significantly slower network performance than regularInternet traffic. The purpose of this project is to explore the design ofanon.next, an anonymity system for the next-generation Internet. In anon.next,we embed anonymizing proxies into new Internet architectures, so that thenetwork itself can provide efficient and effective privacy protection in a waythat overlay designs cannot. This project seeks to make major advances in twoareas key to the design of anon.next. First, methods to constructhigh-throughput paths of anonymizing proxies to route the user's packets totheir destinations with minimal leakage of privacy. Second, secure methods tolocate those proxies without relying on centralized directory servers orexposing the users' packet routes. Both components require us to develop newmetrics for the privacy provided by a given anonymizing path and by the systemas a whole. We are conducting analysis and simulation studies and validatingthese with extensive experimentation on GENI testbeds. These efforts willprovide major insights into the design of anonymity systems, which providepersonal privacy as well as censorship resistance and protection forwhistle-blowers, journalists, and intelligence services. Our project is alsopart of the large effort required to understand and design distributed systemsin the next-generation Internet. This project involves students at many levels,including middle and high school students in summer camp settings,undergraduate students in research into finding new attacks against oursystems, and graduate students.