Collaborative Research: CIF: Small: Not All Eggs in One Basket: Authority Distribution for Resilience Against Compromised Nodes in Communication Networks

合作研究：CIF：小：并非所有鸡蛋都放在一个篮子里：针对通信网络中受损节点的弹性的权限分配

• 批准号: 2425371
• 负责人: Remi Chou
• 金额: $ 30万
• 依托单位: University of Texas at Arlington
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-12-01 至 2025-01-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2425371&HistoricalAwards=false
• 关键词: Collaborative; Research; CIF; Small; Eggs

The ubiquity of networked communication systems in society raises ever-growing security and privacy concerns. In particular, such concerns exist for applications that collect private user information, as in health monitoring, e-commerce, and financial services, and applications associated with critical infrastructure as in transportation, smart grids, or process supervisory management systems. Indeed, for these applications, a single compromised/malicious agent or node of the network can provoke catastrophic events such as ransom payments to recover private data, large-scale electricity blackouts, interruptions of service, data breaches, financial losses, or fatalities. This project aims to explore how distributing the authority to launch critical tasks in the hands of multiple, rather than a single, nodes or users of the network can be an efficient means to avoid having a single point of failure and hence losing private data in its entirety in the case of a security breach. Furthermore, the proposed research studies how authority distribution is able to empower networks with the capability of coping with compromised devices or persons before they are identified as malicious and, most importantly, before they are able to do any harm.The project investigates novel solutions beyond traditional threshold cryptography to address challenging roadblocks in authority distribution for data access and biometric authentication. Specifically, the project aims to overcome (i) privacy challenges with the use of biometrics, (ii) the need for costly resources as perfectly secure communication channels, (iii) a poor scaling behavior with the number of users, and (iv) the need for a central entity which is not compatible with distributed systems, to unravel fundamental trade-offs between privacy and storage requirements. The project comprises three interrelated thrusts. The first thrust studies the fundamental security and privacy guarantees that authority distribution can offer in the presence of, potentially unnoticed, compromised users or nodes. The second thrust investigates the construction of low-complexity coding schemes for authority distribution that operate at finite blocklengths, based on novel methods derived from error control coding and cryptography. The third thrust aims to enable a universal learning framework for authority distribution via deep learning that is independent of the data statistics.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

社会中无处不在的网络通信系统引发了日益增长的安全和隐私问题。特别是，对于收集私人用户信息的应用程序（如健康监测、电子商务和金融服务）以及与关键基础设施相关的应用程序（如交通、智能电网或过程监督管理系统），存在这样的担忧。事实上，对于这些应用程序，网络的单个受损/恶意代理或节点可能会引发灾难性事件，例如为恢复私人数据而支付赎金、大规模停电、服务中断、数据泄露、财务损失或死亡。该项目旨在探索如何将启动关键任务的权限分配给网络的多个节点或用户，而不是单个节点或用户，从而成为避免单点故障并因此丢失私有数据的有效方法。在发生安全漏洞的情况下完整。此外，拟议的研究还研究了权限分配如何使网络能够在受感染的设备或人员被识别为恶意之前，最重要的是，在他们能够造成任何伤害之前，赋予网络处理这些设备或人员的能力。该项目研究了除传统的阈值加密技术可解决数据访问和生物识别身份验证的权限分配方面的挑战性障碍。具体来说，该项目旨在克服（i）使用生物识别技术带来的隐私挑战，（ii）需要昂贵的资源作为完全安全的通信渠道，（iii）用户数量的扩展行为不佳，以及（iv）需要一个与分布式系统不兼容的中央实体来解决隐私和存储要求之间的基本权衡。该项目包括三个相互关联的主旨。第一个主旨研究了权限分配在存在可能未被注意到的受损用户或节点的情况下可以提供的基本安全和隐私保证。第二个主旨基于源自错误控制编码和密码学的新方法，研究在有限块长度下运行的低复杂度权限分配编码方案的构造。第三个推动力旨在通过独立于数据统计的深度学习实现权威分配的通用学习框架。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。