Robustness-as-evolvability: building a dynamic control plane with Software-Defined Networking

高度可用的信息网络是现代社会日益重要的组成部分。有针对性的攻击是这些网络可用性的主要威胁。这些攻击利用网络基础设施中的薄弱组件并对其进行攻击，从而引发伤害最终受害者的副作用。有针对性的攻击是使用高度分布式的攻击者网络进行的，称为僵尸网络，由数千到数十万台受感染的计算机组成。僵尸网络的一个关键特征是可编程，允许攻击者适应基础设施提供商开发的防御。然而，目前的网络基础设施在很大程度上是静态的，因此不能适应快速发展的攻击者。为了设计有效的响应，一个可编程的网络基础设施，使大规模的合作是必要的。我们的研究将创建一种新形式的安全网络基础设施，它可以检测针对自身的攻击。然后，它会自动重新构建基础设施，以最大限度地提高攻击弹性。最后，它自我验证是否可以确保安全性和正确性的全局属性，即使每个部分的基础设施只有一个本地的世界观。我们的研究将研究技术，收集和合并推理在网络内的分布式Vantage点，同时最大限度地减少风险，用户隐私的数据聚合使用新的隐私技术。我们开始着手解决可编程性本身带来的风险，通过开发智能保证技术，在基础设施重新编程之前验证良好意图的证据。我们为设计设定了三个基本设计目标：（1）自动无缝地重建网络基础设施，以抵御针对基础设施战略目标的攻击。(2)一种测量系统，允许动态分配资源，并对基础设施上每个监控位置收集的数据的方式、位置、频率和强度进行精细控制。(3)当基础设施重新编程时，确保安全性并遵守结构弹性的合理原则。我们的目标是基于智能和不断发展的网络基础设施开发未来的网络防御。

Highly available information networks are an increasingly essential component of the modern society. Targeted attacks are a key threat to the availability of these networks. These attacks exploit weak components in network infrastructure and attack them, triggering side-effects that harm the ultimate victim. Targeted attacks are carried out using highly distributed attacker networks called botnets comprising between thousands and hundreds of thousands of compromised computers. A key feature is that botnets are programmable allowing the attacker to adapt to evolve and adapt to defences developed by infrastructure providers. However current network infrastructure is largely static and hence cannot adapt to a fast evolving attacker.To design effective responses, a programmable network infrastructure enabling large-scale cooperation is necessary. Our research will create a new form of secure network infrastructure which detects targeted attacks on itself. It then automatically restructures the infrastructure to maximise attack resilience. Finally, it self-verifies whether global properties of safety and correctness can be assured even though each part of the infrastructure only has a local view of the world.Our research will examine techniques to collect and merge inferences across distributed vantage points within a network whilst minimising risks to user privacy from data-aggregation using novel privacy techniques. We make a start on addressing the risks introduced by programmability itself, by developing smart assurance techniques that can verify evidence of good intention before the infrastructure is reprogrammed.We set three fundamental design objectives for our design: (1) Automated and seamless restructuring of network infrastructure to withstand attacks aimed at strategic targets on the infrastructure.(2) A measurement system that allows dynamic allocation of resources and fine control over the manner, location, frequency, and intensity of data collected at each monitoring location on the infrastructure.(3) Assurance of safety and compliance to sound principles of structural resilience when infrastructure is reprogrammed.Our aim is to develop future network defences based on a smart and evolving network infrastructure.