CAREER: Personal Virtual Networks

我们的移动设备(如手机)经常接触和连接到多个网络，以保持无缝通信，从而实现我们越来越依赖的各种服务，如互联网接入、短信、社交媒体接入和娱乐。然而，这种无处不在的网络连接引发了一些重要的担忧。例如，我们的设备定期通过它们不完全信任且不受我们控制的网络发送数据，这可能会导致安全漏洞、糟糕的服务和侵犯隐私的行为。为了解决这些问题，该提案寻求开发个人虚拟网络(PVN)，为每个设备提供其在网络提供商内的自己的网络，该网络可以提供可定制的安全和隐私。该方案引入了无处不在的PVN的概念，可以将其配置为在不受信任的异类网络中提供隐私、安全和性能。PVN将允许设备在网络提供商内部建立受信任的网络配置，定义网络流量的策略，甚至使用软件中间盒环境部署干预其流量的有限代码。通过安全灵活的接口使设备可以使用网络内资源，PVN可以为用户提供更安全、更灵活、更私有和更高性能的网络体验。建议的工作将设计一个新的体系结构，以及抽象和原语，以提供安全、灵活和可移植的用户定义的网络策略。为了支持不可信环境中的部署，该项目将包括开发新的算法和网络测量，以审计不可信网络中的PVN部署，以及设计新的框架，在可信硬件上提供可证明的隐私和安全保证。最后，拟议的工作将开发和进行由PVN支持的新应用和服务的经验性评估。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Our mobile devices (e.g. cellphones) regularly encounter and connect to multiple networks to maintain seamless communication, enabling the variety of services we increasingly rely on, such as Internet access, text messaging, social media access, and entertainment. However, such ubiquitous network connections raise a number of important concerns. For example, our devices regularly send data over networks they do not fully trust and that are not under our control, which can lead to security vulnerabilities, poor service, and privacy violations. To address these issues, this proposal seeks to develop Personal Virtual Networks, or PVNs, that provide each device with its own network within a network provider that can provide customizable security and privacy. This proposal introduces the idea of ubiquitous PVNs that can be configured to provide privacy, security and performance across untrusted heterogeneous networks. PVNs will allow devices to establish trusted network configurations inside of network providers, define policies for network traffic, and even deploy limited code that interposes on their traffic using a software middlebox environment. By making in-network resources available to devices via a secure and flexible interface, PVNs can enable more secure, flexible, private, and performant network experiences for users. The proposed work will design a new architecture, as well as abstractions and primitives for providing safe, flexible, and portable user-defined network policies. To support deployments in untrusted environments, this project will include the development of new algorithms and network measurements for auditing PVN deployments in untrusted networks, as well as the design of new frameworks that provide provable privacy and security guarantees atop trusted hardware. Last, the proposed work will develop and conduct empirical evaluations of new applications and services that are enabled by PVNs.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.