CAREER: Securing Off-premise Digital Services in the Presence of Strategic Incentives

职业：在战略激励的情况下确保场外数字服务的安全

• 批准号: 2337338
• 负责人: Jiasun Li
• 金额: $ 71.17万
• 依托单位: George Mason University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2024
• 资助国家: 美国
• 起止时间: 2024-03-01 至 2029-02-28
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2337338&HistoricalAwards=false
• 关键词: CAREER; Securing; Off; premise; Digital

The past decade has witnessed significant growth in both cloud and decentralized computing, whereby data and services either live on remote servers or are distributed across many individual devices. Both models raise similar security concerns: As clients lack full control over the service process, they need to make sure that service providers have the right economic incentives to not misbehave. Since the predominant framework in cybersecurity has been motivated by traditional in-house computing, our current thinking about cybersecurity often does not adequately emphasize economic incentives. This project is thus conducting interdisciplinary research to analyze the well-functioning of cyberinfrastructure in the presence of incentive issues. The project aims to enable a more diversified and robust infrastructure; improve digital service efficiency for economic competitiveness; foster competition in digital services provision with technology; bring frontier STEM topics to a broader audience including economists, business researchers, and the general public; and develop education materials to bridge the gap between tech and business students. With the overall objective to enrich the existing paradigm for cybersecurity analysis from a cross-disciplinary perspective, the project team is studying several specific topics under the theme, including the principal-agent frictions between cloud clients and providers, and how to deal with it using both contract theory and recent advances in cryptography, the long-term sustainability of decentralized systems featuring interactions among strategic participants as well as Byzantine faults, and the potential of using results from the first two thrusts to organize a more efficient, fair, and inclusive digital economy. Within these analyses, the project is also illuminating several recent cryptographic breakthroughs for business/economics researchers. By raising awareness, the project team aims to encourage critical assessments of the economic and societal benefits associated with these advances and offer a fresh perspective to guide their further development.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

过去十年见证了云计算和去中心化计算的显着增长，数据和服务要么驻留在远程服务器上，要么分布在许多单独的设备上。这两种模式都提出了类似的安全问题：由于客户缺乏对服务流程的完全控制，他们需要确保服务提供商有适当的经济激励，以免行为不当。由于网络安全的主要框架是由传统的内部计算推动的，因此我们目前对网络安全的思考往往没有充分强调经济激励。因此，该项目正在进行跨学科研究，以分析在存在激励问题的情况下网络基础设施的良好运作。该项目旨在打造更加多元化和强大的基础设施；提高数字服务效率以提高经济竞争力；通过技术促进数字服务提供的竞争；将前沿 STEM 主题带给更广泛的受众，包括经济学家、商业研究人员和公众；开发教育材料以弥合科技学生和商科学生之间的差距。 总体目标是从跨学科的角度丰富现有的网络安全分析范式，项目团队正在研究该主题下的几个具体主题，包括云客户和提供商之间的委托代理摩擦，以及如何利用云解决方案来应对这一问题。契约理论和密码学的最新进展，以战略参与者之间的互动为特征的去中心化系统的长期可持续性以及拜占庭式的错误，以及利用前两个推动力的结果来组织一个更高效、公平和包容的数字化系统的潜力经济。在这些分析中，该项目还为商业/经济研究人员阐明了最近的几项密码学突破。通过提高认识，项目团队旨在鼓励对与这些进步相关的经济和社会效益进行批判性评估，并提供指导其进一步发展的新视角。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准。