CT-T: Collaborative Research: Protecting TCP Congestion Control: Tools for Design, Analysis, and Emulation

提案编号：0523249标题：保护TCP拥塞控制：设计、分析和仿真工具PI：Sonia Fahmy越来越多的违规和恶意流量对互联网的稳定性构成了严重挑战。这种流量可能会大大限制TCP流量可持续的数据速率，并可能影响数百万依赖互联网进行日常业务的用户。以下三种行为异常的流：无响应TCP会话、低速率TCP攻击和随机扫描TCP蠕虫，可以很容易地发起并且具有巨大的破坏性。（iii）以路由器为基础的设计，以有效地控制无差别的TCP蠕虫;及（iv）评估建议计划的工具和方法，特别是使用DETER/Emulab仿真平台。 这项研究将能够深入描述行为不端的流量和设计有效的解决方案，以尽量减少互联网对这种流量的脆弱性，这项工作将产生巨大的实际影响，将促进新的研究方向，走向一个值得信赖的互联网，将加速通过简化实验过程的安全研究，并将在理论和实践实验中培养安全学生。

Proposal Number: 0523249Title: Protecting TCP Congestion Control: Tools for Design, Analysis and EmulationPI: Sonia FahmyThe increasing volume of non-conforming and malicious traffic flows poses a serious challenge to the stability of the Internet. Such traffic flows could significantly throttle the data rates sustainable by TCP flows, and could affect millions of users who rely on the Internet for their daily business. The following three types of misbehaving flows: unresponsive TCP sessions, low-rate TCP-targeted attacks, and randomly scanning TCP worms, can be easy to launch and are enormously damaging.This research takes an ambitious step in systematically developing: (i) dynamic router-based quarantine schemes to penalize unresponsive TCP flows; (ii) defense strategies for low-rate TCP-targeted attacks; (iii) router-based designs to effectively control indiscriminate TCP worms; and (iv) tools and methodologies for the evaluation of the proposed schemes, specifically using the DETER/Emulab emulation platform. The research will enable in-depth characterization of the misbehaving flows and the design of effective solutions for minimizing the vulnerability of the Internet to such flows.This work will have an enormous practical impact, will foster new research directions towards a trustworthy Internet, will accelerate security research by streamlining the experimental process, and will train security students in both theory and hands-on experimentation.