Collaborative Research: CT-T: DoS Prevention in Shared Channels

合作研究：CT-T：共享通道中的 DoS 预防

• 批准号: 0524269
• 负责人: Sanjeev Khanna
• 金额: $ 32.26万
• 依托单位: University of Pennsylvania
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-08-15 至 2010-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0524269&HistoricalAwards=false
• 关键词: Collaborative; Research; CT; DoS; Prevention

Proposal Number: 0524269Title: DoS Prevention in Shared ChannelsPI: Carl GunterMethods for analyzing and preventing Denial of Service (DoS) threats are of fundamental value for designing robust Internet protocols. Much work has been done to develop pragmatic solutions to protocol-specific DoS threats, but there is a lack of realistic theoretical models for studying DoS and of broad paradigms for designing DoS-resilient protocols. This project develops theoretical models based on a "shared channel model" which describes how adversaries and valid senders share the network bandwidth of attack targets. It exploits this model to design counter-measures based on a paradigm in which asymmetries in protocol workloads that are exploited by adversaries are systematically converted to the advantage of trusted parties. Specific project goals include developing (1) general techniques for obtaining DoS-resilience that can be used to adapt existing protocols or create new ones; (2) ways to automate DoS analysis of protocols to reduce the effort required to confirm practical availability properties theoretically and find unexpected attacks before protocols are deployed; and (3) a unified model of integrity, confidentiality, and availability based on both existing algebraic techniques and new probabilistic techniques.

提案编号：0524269TITLE：共享渠道中的DOS预防：用于分析和防止拒绝服务（DOS）威胁的Carl Guntermethods对于设计强大的互联网协议具有基本价值。为了开发针对特定于协议的DOS威胁的实用解决方案已做出了许多工作，但是缺乏研究DOS的现实理论模型和用于设计DOS弹性协议的广泛范式。该项目基于“共享渠道模型”开发理论模型，该模型描述了对手和有效发件人如何共享攻击目标的网络带宽。它利用该模型基于一个范式来设计对抗测量，在该范式中，对手利用的协议工作负载中的不对称是系统地转换为受信任方的优势。特定的项目目标包括开发（1）通用技术，用于获得可用于调整现有协议或创建新协议的DOS耐力； （2）自动化DOS分析协议的方法，以减少理论上确认实际可用性属性所需的努力，并在部署协议之前找到意外的攻击； （3）基于现有代数技术和新的概率技术的完整性，机密性和可用性的统一模型。