Collaborative Research: CIF: Small: Not All Eggs in One Basket: Authority Distribution for Resilience Against Compromised Nodes in Communication Networks

合作研究：CIF：小：并非所有鸡蛋都放在一个篮子里：针对通信网络中受损节点的弹性的权限分配

• 批准号: 2425371
• 负责人: Remi Chou
• 金额: $ 30万
• 依托单位: University of Texas at Arlington
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-12-01 至 2025-01-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2425371&HistoricalAwards=false
• 关键词: Collaborative; Research; CIF; Small; Eggs

The ubiquity of networked communication systems in society raises ever-growing security and privacy concerns. In particular, such concerns exist for applications that collect private user information, as in health monitoring, e-commerce, and financial services, and applications associated with critical infrastructure as in transportation, smart grids, or process supervisory management systems. Indeed, for these applications, a single compromised/malicious agent or node of the network can provoke catastrophic events such as ransom payments to recover private data, large-scale electricity blackouts, interruptions of service, data breaches, financial losses, or fatalities. This project aims to explore how distributing the authority to launch critical tasks in the hands of multiple, rather than a single, nodes or users of the network can be an efficient means to avoid having a single point of failure and hence losing private data in its entirety in the case of a security breach. Furthermore, the proposed research studies how authority distribution is able to empower networks with the capability of coping with compromised devices or persons before they are identified as malicious and, most importantly, before they are able to do any harm.The project investigates novel solutions beyond traditional threshold cryptography to address challenging roadblocks in authority distribution for data access and biometric authentication. Specifically, the project aims to overcome (i) privacy challenges with the use of biometrics, (ii) the need for costly resources as perfectly secure communication channels, (iii) a poor scaling behavior with the number of users, and (iv) the need for a central entity which is not compatible with distributed systems, to unravel fundamental trade-offs between privacy and storage requirements. The project comprises three interrelated thrusts. The first thrust studies the fundamental security and privacy guarantees that authority distribution can offer in the presence of, potentially unnoticed, compromised users or nodes. The second thrust investigates the construction of low-complexity coding schemes for authority distribution that operate at finite blocklengths, based on novel methods derived from error control coding and cryptography. The third thrust aims to enable a universal learning framework for authority distribution via deep learning that is independent of the data statistics.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

社会上网络通信系统的普遍性引起了不断增长的安全性和隐私问题。特别是，对于收集私人用户信息的应用程序，例如健康监控，电子商务和金融服务以及与关键基础架构相关的应用程序，如运输，智能电网或过程监督管理系统，存在此类问题。确实，对于这些应用程序，网络的单一折衷/恶意代理或节点会引起灾难性事件，例如赎金付款，以收回私人数据，大规模的电力停电，服务中断，数据泄露，财务损失或致命性。该项目旨在探索如何分配授权以多个而不是单个，网络的节点或用户来启动关键任务的权限，这是一种有效的手段，可以避免在安全漏洞的情况下全部失去私人数据。此外，拟议的研究研究机构分布如何能够使网络能够与受损害的设备或人员应对的能力，然后才能将其确定为恶意，最重要的是，在它们能够造成任何危害之前，该项目调查了传统阈值超出传统阈值密码范围以外的新颖解决方案，以解决数据访问权限和生物测量的权威分配方面的障碍。具体而言，该项目旨在克服（i）使用生物识别技术，（ii）将资源作为完全安全的通信渠道的需求，（iii）对用户数量的缩放行为不佳，以及（iv）需要与分布式系统不兼容的中心实体，以与分布式系统不兼容，以揭示隐私和存储需求之间的基本权衡权衡。该项目包括三个相互关联的推力。第一个推力研究基本安全和隐私保证，在存在，可能被忽视的用户或节点的存在的情况下，权限分配可以提供。第二个推力研究了基于从错误控制编码和密码学得出的新方法，研究了以有限的区块长度运行的低复杂性编码方案，以在有限的区块长度下运行。第三个力量旨在通过深度学习为权威分配的普遍学习框架，该框架独立于数据统计。该奖项反映了NSF的法定任务，并被认为是值得通过基金会的知识分子优点和更广泛影响的评估标准来通过评估来获得支持的。