CT-T: Collaborative Research: Protecting TCP Congestion Control: Tools for Design, Analysis, and Emulation

CT-T：协作研究：保护 TCP 拥塞控制：设计、分析和仿真工具

• 批准号: 0524202
• 负责人: George Kesidis
• 金额: --
• 依托单位: Pennsylvania State Univ University Park
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-08-15 至 2010-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0524202&HistoricalAwards=false
• 关键词: CT; Collaborative; Research; Protecting; TCP

Proposal Number: 0524402Title: Protecting TCP Congestion Control: Tools for Design, Analysis and EmulationPI: George KesidisThe increasing volume of non-conforming and malicious traffic flows poses a serious challenge to the stability of the Internet. Such traffic flows could significantly throttle the data rates sustainable by TCP flows, and could affect millions of users who rely on the Internet for their daily business. The following three types of misbehaving flows: unresponsive TCP sessions, low-rate TCP-targeted attacks, and randomly scanning TCP worms, can be easy to launch and are enormously damaging.This research takes an ambitious step in systematically developing: (i) dynamic router-based quarantine schemes to penalize unresponsive TCP flows; (ii) defense strategies for low-rate TCP-targeted attacks; (iii) router-based designs to effectively control indiscriminate TCP worms; and (iv) tools and methodologies for the evaluation of the proposed schemes, specifically using the DETER/Emulab emulation platform. The research will enable in-depth characterization of the misbehaving flows and the design of effective solutions for minimizing the vulnerability of the Internet to such flows.This work will have an enormous practical impact, will foster new research directions towards a trustworthy Internet, will accelerate security research by streamlining the experimental process, and will train security students in both theory and hands-on experimentation.

提案号：0524402题目：保护TCP拥塞控制：设计、分析和仿真工具pi: George kesidis越来越多的不符合和恶意流量对互联网的稳定性提出了严重的挑战。这样的流量可能会极大地限制TCP流可承受的数据速率，并可能影响数百万依赖互联网进行日常业务的用户。以下三种类型的错误行为流：无响应的TCP会话、低速率的TCP目标攻击和随机扫描的TCP蠕虫，很容易启动，并且具有巨大的破坏性。本研究在系统开发方面迈出了雄心勃勃的一步：(i)基于路由器的动态隔离方案，以惩罚无响应的TCP流；（ii）针对低速率tcp目标攻击的防御策略；（iii）基于路由器的设计，有效控制不加区分的TCP蠕虫；（iv）评估拟议方案的工具和方法，特别是使用DETER/Emulab仿真平台。该研究将能够深入表征行为不当的流量，并设计有效的解决方案，以最大限度地减少互联网对此类流量的脆弱性。这项工作将产生巨大的实际影响，将为可信赖的互联网培育新的研究方向，将通过简化实验过程来加速安全研究，并将在理论和实践实验方面培养安全学生。