EAGER: Collaborative Research: A Secure and Resilient Virtual Trust Routing Framework for Future Internet

EAGER：协作研究：面向未来互联网的安全且有弹性的虚拟信任路由框架

• 批准号: 1029546
• 负责人: Dijiang Huang
• 金额: $ 13.3万
• 依托单位: Arizona State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-05-01 至 2013-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1029546&HistoricalAwards=false
• 关键词: EAGER; Collaborative; Research; Secure; Resilient

Current network-centric Internet service model is prone toresource exhausting attacks such as Distributed Denial ofServices attacks. Due to the resource sharing nature andnon-coordinated monitoring capability of the current Internet,it is difficult to quickly identify attack sources. Second, anew trend is to develop a user-centric Internet service model,in which traditional local network services are outsourced toremote service providers such as for cloud services. This newtrend allows end users to fully control remote service nodes,their interconnections and routing, which imposes great threatson network resource allocations. Thus, it is highly desiredthat the future Internet is designed to provide a secureservice domain that is both network-centric and user-centric.As a fundamental core to this goal, a secure and resilientvirtualized routing architecture in a global inter-networkingenvironment is explored to provide network resource reservationprotection both at the network-centric and the user-centriclevel. A novel attribute-based, cryptography-based approach toconstruct secure virtualization is to be developed.Furthermore, an architectural solution to address the policyenforcement and inter-domain trust management is alsoconsidered. The end goal is to greatly improve the efficiencyof attack monitoring and intrusion detection and to increasethe resiliency of the future Internet. This is a collaborativeexploratory project bringing together researchers from theUniversity of Missouri-Kansas City, Arizona State University,and Osaka City University, Japan. All research results will bemade available to the scientific community.

当前以网络为中心的Internet服务模型易于Toresource累累的攻击，例如分布式拒绝服务攻击。由于资源共享性质和NONNON协调的监视能力，因此很难快速识别攻击来源。其次，重新趋势是开发以用户为中心的互联网服务模型，在该模型中，传统的本地网络服务是外包的Toremote服务提供商，例如云服务。该新运输允许最终用户完全控制远程服务节点，它们的互连和路由，从而强大的威胁性网络资源分配。因此，这是高度期望的，未来的互联网旨在提供一个以网络为中心和以用户为中心的安全性领域。作为这一目标的基本核心，在全球网络中的环境中，安全且具有弹性的路由架构均可探索在网络资源保护环境中，以提供网络资源保留在网络中，以网络为中心和以用户为中心。将开发一种基于属性的新型基于密码学的方法来制定安全虚拟化。Furthermore是一种解决政策范围和域间信任管理的架构解决方案。最终目标是极大地提高攻击监测和入侵检测的效率，并提高未来互联网的弹性。这是一个合作开发项目，将亚利桑那州立大学密苏里 - 肯萨斯城市大学的研究人员和日本大阪市大学的研究人员聚集在一起。所有研究结果都将为科学界拒绝。