CT-T: Collaborative Research: Protecting TCP Congestion Control: Tools for Design, Analysis, and Emulation

CT-T：协作研究：保护 TCP 拥塞控制：设计、分析和仿真工具

• 批准号: 0523249
• 负责人: Sonia Fahmy
• 金额: --
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-08-15 至 2009-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0523249&HistoricalAwards=false
• 关键词: CT; Collaborative; Research; Protecting; TCP

Proposal Number: 0523249Title: Protecting TCP Congestion Control: Tools for Design, Analysis and EmulationPI: Sonia FahmyThe increasing volume of non-conforming and malicious traffic flows poses a serious challenge to the stability of the Internet. Such traffic flows could significantly throttle the data rates sustainable by TCP flows, and could affect millions of users who rely on the Internet for their daily business. The following three types of misbehaving flows: unresponsive TCP sessions, low-rate TCP-targeted attacks, and randomly scanning TCP worms, can be easy to launch and are enormously damaging.This research takes an ambitious step in systematically developing: (i) dynamic router-based quarantine schemes to penalize unresponsive TCP flows; (ii) defense strategies for low-rate TCP-targeted attacks; (iii) router-based designs to effectively control indiscriminate TCP worms; and (iv) tools and methodologies for the evaluation of the proposed schemes, specifically using the DETER/Emulab emulation platform. The research will enable in-depth characterization of the misbehaving flows and the design of effective solutions for minimizing the vulnerability of the Internet to such flows.This work will have an enormous practical impact, will foster new research directions towards a trustworthy Internet, will accelerate security research by streamlining the experimental process, and will train security students in both theory and hands-on experimentation.

提案编号：0523249标题：保护TCP拥塞控制：设计、分析和仿真工具PI：Sonia Fahmy非一致性和恶意流量的不断增加对互联网的稳定性构成了严重的挑战。这样的流量可能会显著抑制TCP流量可持续的数据速率，并可能影响数百万依赖互联网进行日常业务的用户。这项研究在系统开发方面迈出了雄心勃勃的一步：(I)基于路由器的动态隔离方案以惩罚无响应的tcp流；(Ii)针对低速率以tcp为目标的攻击的防御策略；(Iii)基于路由器的设计以有效地控制不分青红皂白的tcp蠕虫；以及(Iv)用于评估所提出的方案的工具和方法，特别是使用deter/Emulab仿真平台。这项研究将使人们能够深入刻画行为不端的流量，并设计有效的解决方案，将互联网对此类流量的脆弱性降至最低。这项工作将产生巨大的实际影响，将促进朝着可信互联网的新研究方向，将通过简化实验过程来加速安全研究，并将培训安全专业的学生在理论和实践实验方面。