GENI: EAGER: GENI Experiments to Explore Adoption of New Security Services

GENI：EAGER：GENI 实验探索新安全服务的采用

• 批准号: 1152320
• 负责人: George Kesidis
• 金额: $ 10万
• 依托单位: Pennsylvania State Univ University Park
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-09-01 至 2014-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1152320&HistoricalAwards=false
• 关键词: GENI; EAGER; Experiments; Explore; Adoption

This EAGER project will carry out three classes of experiments on GENI, all related to security and privacy and all involving low-level network facilities. Of particular interest is the issue of adoptability: will real users (system administrators) accept novel security solutions and under what circumstances? Three experiments are proposed to address these challenges.The first experiment focuses on a monitoring system to detect infrastructure attacks: Currently, the protocol WATCHERS is known to be able to detect almost all attacks on routers, but its behavior under realistic network traffic is unknown. This experiment will ask questions like: What is the effect of monitoring on the infrastructure itself? How do the benefits of monitoring weighed against the cost of monitoring affect the adoption of the service by autonomous network entities?The second experiment is focused on attack mitigation with modified infrastructure services. Specifically, they will investigate how incremental adoption of a DNS protocol modification might affect the global domain name service when both standard and modified protocols operate simultaneously. Key questions are: Does a new infrastructure attack mitigation scheme interfere with the vulnerable service in widespread use? How do the new and old services compete with one another during the adoption phase?The third experiment focuses on distributed private online social networking. The PIs propose to explore deployment of secure and privacy-flexible p2p-client platforms for migrating from a centralized to a decentralized peer-to-peer social on-line network. The PIs are proposing to develop a social caching/name-resolution server, analogous to DNS for IP networks, to assist the p2p clients (or super peers) connected through GENI as they manage their privacy settings for their communities of interest. Key questions are: how can superpeers identify communities of interest and other social groups? Can they interface with centralized social networking frameworks, like facebook? Can they aid in the protection of privacy of their constituent clients?As for the broader impacts, GENI will be used for experimentation in six security-related university classes. The PIs also participate in the UC Davis COSMOS (Computer Security, Privacy, and Cybervillainy) program, which provides high achieving high school students the opportunity to explore advanced topics in math and science in a university setting. Laboratory experimentation is 30% of the COSMOS program curricula for which GENI will serve as an ideal platform.

这个渴望的项目将进行三类有关GENI的实验，这与安全性和隐私有关，均涉及低级网络设施。特别令人感兴趣的是可采用的问题：真正的用户（系统管理员）是否会接受新的安全解决方案，在什么情况下？提出了三个实验来应对这些挑战。第一个实验侧重于检测基础设施攻击的监视系统：目前，众所周知，该协议观察者能够检测到对路由器的所有攻击，但其现实网络流量下的行为尚不清楚。该实验会问这样的问题：监视基础架构本身的影响是什么？ 监视的好处与监视成本的权衡如何影响自主网络实体对服务的采用？第二次实验集中于通过修改的基础架构服务进行缓解攻击。具体而言，他们将研究DNS协议修改的增量采用如何同时运行标准协议和修改后的协议时可能会影响全局域名服务。关键问题是：新的基础架构攻击缓解方案是否会干扰广泛使用的脆弱服务？在收养阶段，新的和旧服务如何相互竞争？第三个实验集中于分布式私人在线社交网络。 PIS建议探索安全和隐私的P2P-CLIENT平台的部署，以从集中式迁移到分散的点对点社交网络网络。 PI提议开发类似于IP网络的DNS的社交缓存/名称分辨率服务器，以协助通过GENI连接的P2P客户端（或超级同行），因为他们为自己感兴趣的社区管理其隐私设置。关键问题是：超级人如何确定感兴趣的社区和其他社会群体？他们可以与Facebook这样的集中社交网络框架与集中的社交网络框架交互吗？他们可以帮助保护其组成客户的隐私吗？至于更广泛的影响，GENI将用于六个与安全有关的大学课程中的实验。 PIS还参加了UC Davis Cosmos（计算机安全，隐私和网络视频）计划，该计划为高中生提供了探索大学环境中数学和科学高级主题的机会。实验室实验是GENI将作为理想平台的Cosmos计划课程的30％。