GENI: EAGER: GENI Experiments to Explore Adoption of New Security Services

这个迫切的项目将在Geni上进行三类实验，所有实验都与安全和隐私有关，都涉及低级别的网络设施。特别令人感兴趣的是可采用率的问题：实际用户(系统管理员)会接受新的安全解决方案吗？在什么情况下？提出了三个实验来应对这些挑战。第一个实验集中在一个检测基础设施攻击的监控系统上：目前已知协议观察者能够检测到几乎所有针对路由器的攻击，但它在现实网络流量下的行为是未知的。本实验将提出这样的问题：监控对基础设施本身有什么影响？监控的好处与监控的成本如何影响自治网络实体对该服务的采用？第二个实验侧重于通过修改基础设施服务来缓解攻击。具体地说，他们将调查当标准协议和修改后的协议同时运行时，逐渐采用的DNS协议修改可能会如何影响全球域名服务。关键问题是：新的基础设施攻击缓解方案是否会干扰广泛使用的易受攻击的服务？在采用阶段，新旧服务是如何相互竞争的？第三个实验重点是分布式私人在线社交网络。私人投资机构建议探索部署安全和隐私灵活的P2P客户端平台，以从集中式向分散式对等社交在线网络迁移。PI建议开发一种社交缓存/名称解析服务器，类似于IP网络的域名解析，以帮助通过GENI连接的P2P客户端(或超级对等点)管理他们感兴趣的社区的隐私设置。关键问题是：超级同龄人如何识别感兴趣的社区和其他社会群体？它们可以与像Facebook这样的集中式社交网络框架对接吗？它们能帮助保护其组成客户的隐私吗？至于更广泛的影响，Geni将在六个与安全相关的大学课堂上进行实验。PI还参与了加州大学戴维斯分校的COSMOS(计算机安全、隐私和网络恶棍)计划，该计划为成绩优异的高中生提供在大学环境中探索数学和科学高级主题的机会。实验室实验占COSMOS计划课程的30%，GENI将为其提供理想的平台。

This EAGER project will carry out three classes of experiments on GENI, all related to security and privacy and all involving low-level network facilities. Of particular interest is the issue of adoptability: will real users (system administrators) accept novel security solutions and under what circumstances? Three experiments are proposed to address these challenges.The first experiment focuses on a monitoring system to detect infrastructure attacks: Currently, the protocol WATCHERS is known to be able to detect almost all attacks on routers, but its behavior under realistic network traffic is unknown. This experiment will ask questions like: What is the effect of monitoring on the infrastructure itself? How do the benefits of monitoring weighed against the cost of monitoring affect the adoption of the service by autonomous network entities?The second experiment is focused on attack mitigation with modified infrastructure services. Specifically, they will investigate how incremental adoption of a DNS protocol modification might affect the global domain name service when both standard and modified protocols operate simultaneously. Key questions are: Does a new infrastructure attack mitigation scheme interfere with the vulnerable service in widespread use? How do the new and old services compete with one another during the adoption phase?The third experiment focuses on distributed private online social networking. The PIs propose to explore deployment of secure and privacy-flexible p2p-client platforms for migrating from a centralized to a decentralized peer-to-peer social on-line network. The PIs are proposing to develop a social caching/name-resolution server, analogous to DNS for IP networks, to assist the p2p clients (or super peers) connected through GENI as they manage their privacy settings for their communities of interest. Key questions are: how can superpeers identify communities of interest and other social groups? Can they interface with centralized social networking frameworks, like facebook? Can they aid in the protection of privacy of their constituent clients?As for the broader impacts, GENI will be used for experimentation in six security-related university classes. The PIs also participate in the UC Davis COSMOS (Computer Security, Privacy, and Cybervillainy) program, which provides high achieving high school students the opportunity to explore advanced topics in math and science in a university setting. Laboratory experimentation is 30% of the COSMOS program curricula for which GENI will serve as an ideal platform.