SCI: ITR - (NHS + EVS) - (dmc + SIM) : Improving the Integrity of Domain Name System (DNS) Monitoring and Protection

SCI：ITR - (NHS EVS) - (dmc SIM)：提高域名系统 (DNS) 监控和保护的完整性

• 批准号: 0427144
• 负责人: Kimberly Claffy
• 金额: --
• 依托单位: University of California-San Diego
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2004
• 资助国家: 美国
• 起止时间: 2004-09-15 至 2009-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0427144&HistoricalAwards=false
• 关键词: SCI; ITR; NHS; EVS; dmc

This proposal outlines an effort to monitor and study one of the Internet's most important elements of infrastructure whose failure would render the Internet unusable: the Domain Name System (DNS). The CAIDA measurement group from SDSC is teaming with the Internet Systems Consortium (ISC), maintainers of BIND and the F-root servers of DNS, to carry out a series of tasks. These tasks include: establish a long-term measurement infrastructure with supporting software tools to measure and understand behavior of the root DNS system; study a series of research questions on DNS such as the effects of anycast for a given root and/or client, anomaly identification in DNS traffic; characterizing traffic reaching the root name servers; understanding spurious RFC 1918 (private address space) traffic; how to auto-identify one-way queries; the traffic effects of DNSSEC; DNS resolver behavior in the context of global DNS; and characterizing root server performance and connectivity. The sum of this work, and the associated outreach activities, are intended to go a long way in the community hardening and securing DNS over time.Intellectual Merit and Broader Impact: The intellectual merit of this proposal lies in how it addresses National and Homeland Security (NHS) related recommendations to develop a 'cyberspace network operations center (NOC)' as well as its long-term mission to provide data needed to support DNS research that has relevance to the real Internet and how it support economic prosperity and vibrant civil society (ECS). The proposed work has broad impact on all three national priority areas in the ITR solicitation: (1) It advances the integrity of the field of Internet research by providing real data from core Internet components that are otherwise not amenable to measurement or modeling. (2) A global economy dependent on the Internet is a global economy dependent on the Domain Name Service working properly and securely. Protecting oneself against vulnerabilities in the DNS infrastructure will reduce national as well as global risk. (3) The DNS-OARC will enhance national and international security by providing a collaborative knowledge environment in which to establish and refine mechanisms for emergency response, and developing new technology for prevention, attribution and remediation of malicious or otherwise misbehaving agents affecting the DNS.

该提案概述了监测和研究互联网最重要的基础设施要素之一的努力：域名系统（DNS），其故障将导致互联网无法使用。 SDSC 的 CAIDA 测量小组正在与互联网系统联盟 (ISC)、BIND 维护者和 DNS 的 F 根服务器合作，开展一系列任务。这些任务包括：建立一个长期测量基础设施，并配备支持软件工具来测量和了解根 DNS 系统的行为；研究一系列有关 DNS 的研究问题，例如选播对给定根和/或客户端的影响、DNS 流量中的异常识别；表征到达根名称服务器的流量；了解虚假 RFC 1918（私有地址空间）流量；如何自动识别单向查询； DNSSEC 的流量影响；全球 DNS 上下文中的 DNS 解析器行为；并表征根服务器的性能和连接性。这项工作的总和以及相关的外展活动旨在随着时间的推移，在社区强化和保护 DNS 方面发挥很大作用。 智力价值和更广泛的影响：该提案的智力价值在于它如何解决国家和国土安全 (NHS) 相关建议，以开发“网络空间网络运营中心 (NOC)”，以及提供支持与真实互联网和相关的 DNS 研究所需的数据的长期使命。 它如何支持经济繁荣和充满活力的公民社会 (ECS)。拟议的工作对 ITR 征集中的所有三个国家优先领域具有广泛影响：(1) 它通过提供来自核心互联网组件的真实数据来促进互联网研究领域的完整性，否则这些数据不适合测量或建模。 (2) 依赖互联网的全球经济就是依赖域名服务正常、安全运行的全球经济。保护自己免受 DNS 基础设施漏洞的影响将减少国家和全球风险。 (3) DNS-OARC 将通过提供协作知识环境来建立和完善应急响应机制，并开发用于预防、归因和补救影响 DNS 的恶意或其他不当行为代理的新技术，从而增强国家和国际安全。