CICI: Secure Data Architecture: Collaborative Research: Assured Mission Delivery Network Framework for Secure Scientific Collaboration

CICI：安全数据架构：协作研究：确保安全科学协作的任务交付网络框架

• 批准号: 1547380
• 负责人: Raj Jain
• 金额: $ 22万
• 依托单位: Washington University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-01-01 至 2019-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1547380&HistoricalAwards=false
• 关键词: CICI; Secure; Data; Architecture; Collaborative

Collaborative, multi-disciplinary and multi-institutional research projects require secure and resilient cyberinfrastructure in order to efficiently support data sharing, access to remote scientific instruments, video-conferencing and on-line discussions. The underlying network plays a crucial role in supporting these needs in that it must provide assurance about the security of data and collaborative activities. This project addresses such requirement by designing and developing a network architecture to securely share data among groups of scientists. A community of scientists sharing a common interest and supporting resources is called a mission. This project will design and prototype the architecture of the Assured Mission Delivery Network (AMDN), which will enable collaboration among scientific communities involving multiple independent organizations with varying levels of trust. They novelty of AMDN lies in the notion of network-level Mission Assurance Services (MAS); these services allows mission directors to specify actions to be taken by the network to deal with attacks and anomalies and to quickly reconfigure the network to best assure the successful completion of the mission. Security is the key part of the AMDN design, and addresses essential functionality such as authentication, integrity, accountability and privacy. AMDN also includes Collective Anomaly Detection, in which intra- and inter-cloud networking alarms and anomalies indicative of attacks are combined and used for mission assurance strategies. The detected anomalies and alarms are correlated over the whole system in order to detect sophisticated attacks that might be undetectable at the single node level. The security of the entire system is flexible and programmable depending on the nature of collaborations, computing resources needed, and various requirements of scientists. In addition to scientific use, AMDN can be used for commercial applications such as financial data sharing among banks or health data sharing among hospitals and between critical infrastructures such as Smart Grids. Although AMDN is primarily designed for wide-area network usage, it can be used for services and clients residing inside a single cloud or data center.

协作、多学科和多机构研究项目需要安全且有弹性的网络基础设施，以便有效支持数据共享、远程科学仪器访问、视频会议和在线讨论。底层网络在支持这些需求方面发挥着至关重要的作用，因为它必须提供数据和协作活动的安全性保证。该项目通过设计和开发网络架构来满足此类要求，以在科学家群体之间安全地共享数据。拥有共同兴趣和支持资源的科学家群体称为使命。该项目将设计有保证的任务交付网络（AMDN）的架构并对其进行原型设计，该架构将使涉及多个具有不同信任级别的独立组织的科学界之间进行协作。 AMDN 的新颖之处在于网络级任务保障服务 (MAS) 的概念；这些服务使任务主管能够指定网络要采取的行动来处理攻击和异常情况，并快速重新配置网络，以最好地确保任务的成功完成。安全性是 AMDN 设计的关键部分，涉及身份验证、完整性、问责制和隐私等基本功能。 AMDN 还包括集体异常检测，其中云内和云间网络警报以及指示攻击的异常被组合起来并用于任务保证策略。检测到的异常和警报在整个系统上相互关联，以便检测在单节点级别可能无法检测到的复杂攻击。整个系统的安全性是灵活且可编程的，具体取决于协作的性质、所需的计算资源以及科学家的各种要求。除了科学用途外，AMDN 还可用于商业应用，例如银行之间的金融数据共享或医院之间以及智能电网等关键基础设施之间的健康数据共享。尽管 AMDN 主要设计用于广域网使用，但它也可用于驻留在单个云或数据中心内的服务和客户端。