Nets: Small: Optimal Design of Anonymous Network Systems under Resource Constraints

网络系统中的隐私不仅限于交换数据的保密性;保护通信方的身份和数据流的路径同样重要。这种网络信息的可用性不仅侵犯了用户隐私，而且还为恶意对手提供了一个方便的平台，以发动更强大的攻击。匿名网络系统是由特殊路由器和代理服务器组成的网络，它们使用加密工具和隐蔽中继提供保护。通常部署的系统，但是，容易受到数据包传输的定时分析，并不提供必要的保护下的资源limitations. Principal调查将调查可证明的最佳设计的匿名网络系统的资源和所需的网络服务质量（QoS）的约束下。 他们将开发一种新的匿名性定量测量方法，该方法将对手可用的完整信息以及网络的资源和拓扑约束考虑在内。使用定量模型，他们将探讨网络系统设计中的以下三个关键问题：最佳资源分配，随机路由和拓扑设计。如果成功的话，分析将产生新的网络算法，以实现匿名的信息交换，迎合现代的网络设计范式，如移动性和应用程序的独立性。更广泛的影响：这项研究将有一个重大的影响，在提供可证明的隐私网络系统。该研究促进了网络安全方面的研究生和本科生教育，并通过远程学习计划为社区大学生和执法人员提供了该领域的最新进展。此外，还将扩大初中至高中学生对社交网络安全漏洞的认识。

Privacy in networked systems goes beyond the secrecy of exchanged data; it is equally critical to protect the identities of communicating parties and the paths of data flow. Availability of such networking information is not only a violation of user privacy, but also provides a convenient platform for a malicious adversary to launch more powerful attacks. Anonymous network systems are networks of special routers and proxy servers that provide protection using cryptographic tools and covert relaying. Commonly deployed systems are, however, vulnerable to timing analysis of packet transmissions and do not provide the necessary protection under resource limitations.The principal investigators will investigate the provably optimal design of anonymous network systems under constraints on resources and desired network quality of service (QoS). They will develop a novel quantitative measure of anonymity that takes into account the complete information available to an adversary and the resource and topological constraints of a network. Using the quantitative model, they will explore the following three critical problems in network system design: optimal resource allocation, stochastic routing, and topological design. If successful, the analysis will give rise to novel networking algorithms to achieve anonymity in information exchange that cater to modern paradigms of network design such as mobility and application independence.Broader Impact: The research will have a significant impact in delivering provable privacy for networked systems. The research promotes graduate and undergraduate education in network security and provides access to recent advances in the field to community college students and law enforcement personnel through distance learning programs. In addition, awareness of security vulnerabilities in social networks will be broadened for middle to high school students.