网络虚拟环境中不可信客户端的语义完整性增强
Enforcing Semantic Integrity on Untrusted Clients in Networked Virtual Environments
摘要：
在过去的几年中，支持多个参与者通过互联网进行交互的真实物理环境的大规模模拟已经变得越来越可用并且具有经济意义，最显著的是在计算机游戏行业中。这种系统通常称为网络虚拟环境（NVE），通常基于客户端-服务器架构，其中出于性能原因和带宽限制，模拟部分推迟到客户端。这种不可避免的架构选择使得模拟容易受到针对模拟的语义完整性的攻击：恶意客户端可能会试图破坏控制模拟的物理和逻辑定律，或者事后改变事件的因果关系。在本文中，我们开始从安全的角度来看，在NVE语义完整性的系统研究。我们认为，天真的政策，以执行语义完整性涉及无法忍受的网络负载，因此，实际上是不可行的。我们提出了一个新的语义完整性协议的基础上的密码原语，使服务器系统审计的本地计算的客户端的需求。我们的方法有利于低网络和CPU负载，招致合理的工程开销，并最大限度地从软实时的约束的仿真审计过程。
英文摘要：
During the last years, large-scale simulations of realistic physical environments which support the interaction of multiple participants over the Internet have become increasingly available and economically significant, most notably in the computer gaming industry. Such systems, commonly called networked virtual environments (NVEs), are usually based on a client-server architecture where for performance reasons and bandwidth restrictions, the simulation is partially deferred to the clients. This inevitable architectural choice renders the simulation vulnerable to attacks against the semantic integrity of the simulation: malicious clients may attempt to compromise the physical and logical laws governing the simulation, or to alter the causality of events a posteriori. In this paper, we initiate the systematic study of semantic integrity in NVEs from a security point of view. We argue that naive policies to enforce semantic integrity involve intolerable network load, and are therefore not practically feasible. We present a new semantic integrity protocol based on cryptographic primitives which enables the server system to audit the local computations of the clients on demand. Our approach facilitates low network and CPU load, incurs reasonable engineering overhead, and maximally decouples the auditing process from the soft real time constraints of the simulation.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
