Collaborative Research: IHCS-Cybersystems: Integration of Protocol and Hardware Design for Securing Internet Communications

合作研究：IHCS-Cyber​​systems：用于保护互联网通信的协议和硬件设计的集成

• 批准号: 0901530
• 负责人: Xun Liu
• 金额: $ 15.01万
• 依托单位: North Carolina State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2009
• 资助国家: 美国
• 起止时间: 2009-08-01 至 2011-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0901530&HistoricalAwards=false
• 关键词: Collaborative; Research; IHCS; Cybersystems; Integration

The objective of this research is to design a series of security enhancements at the network layer to defend Internet services against malicious attacks. The approach integrates protocol design at the network layer with hardware design at the physical layer. The proposed approach has the potential to deliver effective, low-cost, and easy-to-upgrade solutions to secure the next-generation Internet.With respect to intellectual merit, the research addresses the opportunity to improve security at the network layer, while most recent advances in security have focused on the transport and application layers. The research also considers the integration of protocol design at the network layer with hardware implementation at the physical layer. The proposed enhancements are co-developed and co-deployed at the network and physical layers, with the goal of high efficiency. The research focuses on the judicious integration of software and hardware techniques to resolve the challenges of providing effective network security with efficient hardware support.With respect to the potential for broader impact, this research can serve as a catalyst for the large-scale deployment of effective and robust security services on the Internet, offering a high level of reliability for future security services. The approach to developing security techniques simultaneously across different layers has the potential to provoke more basic research in this area. The project also focuses on integrating education and research activities through enhancing undergraduate and graduate courses on network security and very large-scale integrated (VLSI) circuit design.

本研究的目的是在网络层设计一系列安全增强措施，以保护互联网服务免受恶意攻击。 该方法将网络层的协议设计与物理层的硬件设计相结合。 所提出的方法有可能提供有效、低成本且易于升级的解决方案来保护下一代互联网。就智力价值而言，该研究解决了提高网络层安全性的机会，而大多数安全方面的最新进展集中在传输层和应用层。 该研究还考虑了网络层协议设计与物理层硬件实现的集成。 所提出的增强功能是在网络层和物理层共同开发和共同部署的，其目标是提高效率。 该研究的重点是软件和硬件技术的明智集成，以解决通过高效硬件支持提供有效网络安全的挑战。就产生更广泛影响的潜力而言，该研究可以作为有效网络大规模部署的催化剂。以及互联网上强大的安全服务，为未来的安全服务提供高水平的可靠性。 跨不同层同时开发安全技术的方法有可能激发该领域的更多基础研究。 该项目还侧重于通过加强网络安全和超大规模集成（VLSI）电路设计方面的本科生和研究生课程来整合教育和研究活动。