Collaborative Research: Planning Grant: A Clean-Slate Design for the Next-Generation Secure Internet

合作研究：规划拨款：下一代安全互联网的全新设计

• 批准号: 0540274
• 负责人: Steven Bellovin
• 金额: $ 5万
• 依托单位: Columbia University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-08-01 至 2006-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0540274&HistoricalAwards=false
• 关键词: Collaborative; Research; Planning; Grant; Clean

The Internet has become an indispensable infrastructure for our economy, society, and government. However, despite its critical importance, today's Internet is extremely fragile and suffers from frequent attacks. One of the main reasons for the security vulnerabilities of today's Internet is that the Internet protocols and architecture were designed for a trustworthy environment. This assumption is clearly no longer valid in today's Internet, connecting millions of people, computers, and corporations distributed throughout the world. Many researchers have studied how to secure the Internet, mostly by proposing patches to address current vulnerabilities. However, partial solutions and ad hoc mechanisms often do not address the root cause of the problems, and hence will not be able to eradicate the current problems and prevent them from manifesting in different forms in the future. Moreover, security patches and ad hoc security solutions increase network complexity, which in turn increases vulnerability. Thus, we need a radical new design for a next-generation Internet, which is designed ground-up from sound principles. Intellectual Merit: The principal investigators (PIs) plan a series of efforts to engage the community in systematically exploring this important question of how to provide the next-generation Internet with a set of fundamental security design principles and mechanisms that will provide the next generation Internet with provable security guarantees. One part of the planning effort is one or more workshops. Starting from a clean-slate approach, participants in the workshops will investigate the fundamental issues in designing a secure next generation Internet, which not only removes many of the current security problems but also provides provable security guarantees against unforeseen future attacks. The deployment of a next-generation secure Internet will likely start out as a research test bed. Such an infrastructure will attract applications requiring high-assurance, resulting in a transition of hosts to the secure Internet. The success of such a test bed critically depends on the collaboration of researchers in networking, architecture, and security. A distributed effort with many small projects is unlikely to have the same impact as a coordinated collaborative research effort. This planning effort will provide coordination of research efforts and establishing community consensus for promising research directions.Broader Impacts. This effort will involve the networking and security communities to establish a consensus on what security properties to provide in the network, and to establish promising research directions for designing a secure next-generation secure Internet. Included in this effort is a workshop with 30-40 networking and security experts from industry and academia to further explore and define a research direction for the next-generation secure Internet. The PIs will produce a report to communicate the results from this planning activity to the broader research community. Through a series of meetings, organized discussions, presentations, this effort will build a roadmap and help the community to reach consensus on what the important research directions are and how the different research efforts work together to achieve the desired goal of designing and implementing a testbed of an architecture for a next-generation secure Internet.

互联网已成为我们经济，社会和政府的必不可少的基础设施。但是，尽管其重要性至关重要，但当今的互联网非常脆弱，遭受了频繁的攻击。当今Internet安全漏洞的主要原因之一是Internet协议和体系结构是为一个值得信赖的环境而设计的。在当今的互联网上，这种假设显然不再有效，它将数百万人，计算机和公司在全球范围内连接起来。许多研究人员研究了如何通过提议解决当前漏洞的补丁来保护互联网。但是，部分解决方案和临时机制通常无法解决问题的根本原因，因此将无法消除当前的问题并防止将来以不同的形式表现出来。此外，安全补丁和临时安全解决方案增加了网络的复杂性，进而增加了脆弱性。因此，我们需要一个激进的新设计，用于下一代互联网，这是根据声音原则设计的。知识分子的优点：首席研究人员（PIS）计划一系列努力，以系统地探索如何为下一代互联网提供一系列基本安全设计原理和机制，以提供可验证的安全保证。计划工作的一部分是一个或多个研讨会。从干净的方法开始，研讨会的参与者将调查设计安全的下一代互联网时的基本问题，这不仅消除了当前的许多安全问题，而且还提供了可证明的安全保证，以防止未来的未来攻击。下一代安全互联网的部署可能会从研究床开始。这样的基础架构将吸引需要高保证的应用程序，从而导致主机过渡到安全的互联网。这种测试床的成功在很大程度上取决于研究人员在网络，建筑和安全性方面的协作。许多小型项目的分布努力不太可能与协调的协作研究工作产生相同的影响。这项计划工作将提供研究工作的协调，并为有希望的研究方向建立社区共识。这项工作将涉及网络和安全社区，以建立关于在网络中提供的安全属性的共识，并为设计安全的下一代安全互联网建立有前途的研究方向。这项工作中包括一个车间，拥有来自行业和学术界的30-40个网络和安全专家，以进一步探索和定义下一代安全互联网的研究方向。 PI将制作一份报告，将该计划活动的结果传达给更广泛的研究社区。通过一系列的会议，有组织的讨论，演讲，这项工作将建立路线图，并帮助社区就重要的研究指示达成共识，以及不同的研究工作如何共同努力，以实现为下一代安全互联网设计和实施建筑的所需目标。