[UCI-Calit2] Scalability, Control and Isolation on Next-Generation Networks

[Anna Lynn Spitzer]

Title:                  SCION: Scalability, Control and Isolation on
Next-Generation Networks



Speaker:           Adrian Perrig, Department of Electrical and Computer
Engineering, Carnegie Mellon University


Time:                9:30-10:30 a.m.

 

Date:                 Thursday, Feb. 9, 2012 

Location:          Donald Bren Hall, Room 6011 



Host:                 Gene Tsudik

 

Abstract:  Perrig will discuss the first Internet architecture designed
to provide route control, failure isolation and explicit trust
information for end-to-end communications. SCION separates AS-s into
groups of independent routing sub-planes, called trust domains, which
then interconnect to form complete routes. Trust domains provide natural
isolation of routing failures and human misconfiguration, give endpoints
strong control for both inbound and outbound traffic, provide meaningful
and enforceable trust, and enable scalable routing updates with
high-path freshness. As a result, this architecture provides strong
resilience and security properties as an intrinsic consequence of good
design principles, avoiding piecemeal add-on protocols as security
patches. Meanwhile, SCION only assumes that a few top-tier ISPs in the
trust domain are trusted for providing reliable end-to-end
communications, thus achieving a small Trusted Computing Base. Security
analysis and evaluation results show that SCION naturally prevents
numerous attacks and provides a high level of resilience, scalability,
control and isolation.

Bio:  Adrian Perrig is a professor of electrical and computer
engineering, engineering and public policy, and computer science at
Carnegie Mellon University. He serves as the technical director for
Carnegie Mellon's Cybersecurity Laboratory (CyLab). Perrig earned his
Ph.D. degree in computer science from Carnegie Mellon, and spent three
years during his doctoral work at the University of California,
Berkeley. He received his B.Sc. degree in computer engineering from the
Swiss Federal Institute of Technology in Lausanne (EPFL). Perrig's
research revolves around building secure systems and includes network
security, trustworthy computing and security for social networks. More
specifically, he is interested in trust establishment, trustworthy code
execution in the presence of malware, and how to design secure
next-generation networks. More information about his research is
available on his web page: http://www.ece.cmu.edu/~adrian/
<http://www.ece.cmu.edu/%7Eadrian/> . He is a recipient of the NSF
CAREER award in 2004, IBM faculty fellowships in 2004 and 2005, the
Sloan Research Fellowship in 2006, the Security 7 award in the category
of education by Information Security Magazine in 2009, and the Benjamin
Richard Teare Teaching Award in 2011. 

  

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://maillists.uci.edu/mailman/public/uci-calit2/attachments/20120206/64ba1c75/attachment.html