SCI: ITR - (NHS + EVS) - (dmc + SIM) : Improving the Integrity of Domain Name System (DNS) Monitoring and Protection

SCI：ITR - (NHS EVS) - (dmc SIM)：提高域名系统 (DNS) 监控和保护的完整性

• 批准号: 0427144
• 负责人: Kimberly Claffy
• 金额: --
• 依托单位: University of California-San Diego
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2004
• 资助国家: 美国
• 起止时间: 2004-09-15 至 2009-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0427144&HistoricalAwards=false
• 关键词: SCI; ITR; NHS; EVS; dmc

This proposal outlines an effort to monitor and study one of the Internet's most important elements of infrastructure whose failure would render the Internet unusable: the Domain Name System (DNS). The CAIDA measurement group from SDSC is teaming with the Internet Systems Consortium (ISC), maintainers of BIND and the F-root servers of DNS, to carry out a series of tasks. These tasks include: establish a long-term measurement infrastructure with supporting software tools to measure and understand behavior of the root DNS system; study a series of research questions on DNS such as the effects of anycast for a given root and/or client, anomaly identification in DNS traffic; characterizing traffic reaching the root name servers; understanding spurious RFC 1918 (private address space) traffic; how to auto-identify one-way queries; the traffic effects of DNSSEC; DNS resolver behavior in the context of global DNS; and characterizing root server performance and connectivity. The sum of this work, and the associated outreach activities, are intended to go a long way in the community hardening and securing DNS over time.Intellectual Merit and Broader Impact: The intellectual merit of this proposal lies in how it addresses National and Homeland Security (NHS) related recommendations to develop a 'cyberspace network operations center (NOC)' as well as its long-term mission to provide data needed to support DNS research that has relevance to the real Internet and how it support economic prosperity and vibrant civil society (ECS). The proposed work has broad impact on all three national priority areas in the ITR solicitation: (1) It advances the integrity of the field of Internet research by providing real data from core Internet components that are otherwise not amenable to measurement or modeling. (2) A global economy dependent on the Internet is a global economy dependent on the Domain Name Service working properly and securely. Protecting oneself against vulnerabilities in the DNS infrastructure will reduce national as well as global risk. (3) The DNS-OARC will enhance national and international security by providing a collaborative knowledge environment in which to establish and refine mechanisms for emergency response, and developing new technology for prevention, attribution and remediation of malicious or otherwise misbehaving agents affecting the DNS.

该提案概述了监视和研究互联网最重要的基础设施要素之一，其失败会使互联网无法使用：域名系统（DNS）。来自SDSC的CAIDA测量组与Internet Systems联盟（ISC），BIND的维护者和DNS的F-Root服务器合作，以执行一系列任务。这些任务包括：通过支持软件工具来建立长期测量基础架构，以衡量和了解根DNS系统的行为；研究有关DNS的一系列研究问题，例如Anycast对给定根和/或客户的影响，DNS流量中的异常识别；表征到达根名服务器的流量；了解伪造的RFC 1918（私人地址空间）流量；如何自动识别单向查询； DNSSEC的交通效应；在全球DNS的背景下，DNS解析器行为；并表征根服务器性能和连接性。这项工作的总和以及相关的外展活动旨在在社区中大有帮助，随着时间的流逝，智能优点和更广泛的影响：这一建议的智力优点在于它如何在国家和国土安全（NHS）方面解决与之相关的互联网，并为其提供了'Cyber​​space网络操作（NHS）的相关建议，并为DATID提供了与DATA相关的建议，并提供了数据，并为DATA提供了数据，并提供了数据。它如何支持经济繁荣和充满活力的民间社会（ECS）。拟议的工作对ITR征集的所有三个国家优先领域都有广泛的影响：（1）它通过提供核心互联网组件的真实数据来提高Internet研究领域的完整性，而这些数据否则不适合测量或建模。 （2）依赖互联网的全球经济是依赖于域名服务正常可靠地工作的全球经济。保护自己免受DNS基础设施中的脆弱性，将降低民族和全球风险。 （3）DNS-OARC将通过提供一个协作知识环境来增强国家和国际安全，以建立和完善紧急响应的机制，并开发新技术来预防，归因和补救恶意或其他错误地做出影响DNS的恶意或其他错误的代理。