REMOTEGATE：激励兼容的安全网关远程配置
REMOTEGATE: Incentive-Compatible Remote Configuration of Security Gateways
摘要：
想象一下，一个恶意的黑客试图通过互联网攻击一个服务器，而服务器希望尽可能地在靠近攻击数据包的来源地阻止攻击数据包。但是，攻击源前面的安全网关是不可信的。服务器如何阻止通过此网关的攻击数据包？在本文中，我们介绍了REMOTEGATE，一个值得信赖的机制，允许任何一方（服务器）在互联网上配置一个安全网关所拥有的第二方，在一定的商定的报酬，前者支付给后者的服务。我们采取一个互动的激励兼容的方法，当服务器和网关都是合理的情况下，设计一个协议，将允许服务器帮助安全网关生成和部署一个策略规则，过滤攻击数据包之前，他们到达服务器。只有当网关能够成功验证它已经为问题生成并部署了正确的规则时，服务器才会奖励网关。这一机制将使互联网规模的方法能够在数字支付激励的支持下提高安全性和隐私性。
英文摘要：
Imagine that a malicious hacker is trying to attack a server over the Internet and the server wants to block the attack packets as close to their point of origin as possible. However, the security gateway ahead of the source of attack is untrusted. How can the server block the attack packets through this gateway? In this paper, we introduce REMOTEGATE, a trustworthy mechanism for allowing any party (server) on the Internet to configure a security gateway owned by a second party, at a certain agreed upon reward that the former pays to the latter for its service. We take an interactive incentive-compatible approach, for the case when both the server and the gateway are rational, to devise a protocol that will allow the server to help the security gateway generate and deploy a policy rule that filters the attack packets before they reach the server. The server will reward the gateway only when the latter can successfully verify that it has generated and deployed the correct rule for the issue. This mechanism will enable an Internet-scale approach to improving security and privacy, backed by digital payment incentives.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
