GENI: EAGER: GENI Experiments to Explore Adoption of New Security Services

GENI：EAGER：GENI 实验探索新安全服务的采用

• 批准号: 1152664
• 负责人: Karl Levitt
• 金额: $ 19.9万
• 依托单位: University of California-Davis
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-09-01 至 2014-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1152664&HistoricalAwards=false
• 关键词: GENI; EAGER; Experiments; Explore; Adoption

This EAGER project will carry out three classes of experiments on GENI, all related to security and privacy and all involving low-level network facilities. Of particular interest is the issue of adoptability: will real users (system administrators) accept novel security solutions and under what circumstances? Three experiments are proposed to address these challenges.The first experiment focuses on a monitoring system to detect infrastructure attacks: Currently, the protocol WATCHERS is known to be able to detect almost all attacks on routers, but its behavior under realistic network traffic is unknown. This experiment will ask questions like: What is the effect of monitoring on the infrastructure itself? How do the benefits of monitoring weighed against the cost of monitoring affect the adoption of the service by autonomous network entities?The second experiment is focused on attack mitigation with modified infrastructure services. Specifically, they will investigate how incremental adoption of a DNS protocol modification might affect the global domain name service when both standard and modified protocols operate simultaneously. Key questions are: Does a new infrastructure attack mitigation scheme interfere with the vulnerable service in widespread use? How do the new and old services compete with one another during the adoption phase?The third experiment focuses on distributed private online social networking. The PIs propose to explore deployment of secure and privacy-flexible p2p-client platforms for migrating from a centralized to a decentralized peer-to-peer social on-line network. The PIs are proposing to develop a social caching/name-resolution server, analogous to DNS for IP networks, to assist the p2p clients (or super peers) connected through GENI as they manage their privacy settings for their communities of interest. Key questions are: how can superpeers identify communities of interest and other social groups? Can they interface with centralized social networking frameworks, like facebook? Can they aid in the protection of privacy of their constituent clients?As for the broader impacts, GENI will be used for experimentation in six security-related university classes. The PIs also participate in the UC Davis COSMOS (Computer Security, Privacy, and Cybervillainy) program, which provides high achieving high school students the opportunity to explore advanced topics in math and science in a university setting. Laboratory experimentation is 30% of the COSMOS program curricula for which GENI will serve as an ideal platform.

这个EAGER项目将在GENI上进行三类实验，所有实验都与安全和隐私相关，并且都涉及底层网络设施。特别令人感兴趣的是可采用性问题：真正的用户（系统管理员）会接受新颖的安全解决方案吗？在什么情况下？提出了三个实验来应对这些挑战。第一个实验侧重于检测基础设施攻击的监控系统：目前，WATCHERS 协议已知能够检测几乎所有对路由器的攻击，但其在实际网络流量下的行为尚不清楚。该实验将提出以下问题：监控对基础设施本身有何影响？ 监控的好处与监控成本的权衡如何影响自治网络实体对服务的采用？第二个实验的重点是通过修改后的基础设施服务来缓解攻击。具体来说，他们将研究当标准协议和修改后的协议同时运行时，逐步采用 DNS 协议修改可能如何影响全球域名服务。关键问题是：新的基础设施攻击缓解方案是否会干扰广泛使用的易受攻击的服务？在采用阶段，新旧服务如何相互竞争？第三个实验侧重于分布式私人在线社交网络。 PI 建议探索部署安全且隐私灵活的 p2p 客户端平台，以从集中式迁移到去中心化的点对点社交在线网络。 PI 提议开发一个社交缓存/名称解析服务器，类似于 IP 网络的 DNS，以协助通过 GENI 连接的 p2p 客户端（或超级对等点）管理其感兴趣社区的隐私设置。关键问题是：超级同行如何识别利益群体和其他社会群体？它们可以与 Facebook 等集中式社交网络框架交互吗？它们能否帮助保护其组成客户的隐私？至于更广泛的影响，GENI 将用于六个与安全相关的大学课程的实验。 PI 还参加加州大学戴维斯分校 COSMOS（计算机安全、隐私和网络恶意）计划，该计划为成绩优异的高中生提供在大学环境中探索数学和科学高级主题的机会。实验室实验占 COSMOS 项目课程的 30%，GENI 将作为一个理想的平台。