CT-ISG: Understanding Control Plane Security: The Method of Strong Detection

路由协议使一组分布式节点能够确定重要网络(如Internet)上的数据流。因此，确保整个网络中的节点正确地实现路由协议是至关重要的。这些网络中的路由协议是分布式的，节点独立运行，但如果网络要正确和高效地运行，就必须合作并遵守路由协议的规则。路由协议是网络体系结构中所谓的“控制平面”的基础。本项目主要关注控制平面，并寻求进一步开发一种方法来测量现有和未来的路由协议的控制平面组件的固有安全性。整个方法有一个重要的理论组成部分：识别一般类型的路由协议，并分析它们的自我监控能力。强检测技术被用来揭示这些类型的路由协议可以检测到的错误种类的界限，从而根据路由协议的自监控能力来识别路由协议的复杂性类别。强检测的新颖之处不仅在于它能够识别控制平面攻击的存在，而且还在于它能够对各类路由协议的攻击强度进行分类。该项目将有助于路由安全的一般领域，这是保护我们的网络基础设施免受故意或意外损坏所必需的。

Routing protocols enable a distributed set of nodes to determine theflow of data over important networks such as the Internet. As aresult, ensuring that nodes throughout the network properly implementthe routing-protocol is of paramount importance. The routing-protocolsin these networks are distributed, and nodes operate independently,but must cooperate and "play by the rules" of the routing protocolif the network is to function correctly and efficiently. Routingprotocols form the basis of what is called the "control plane" of anetworking architecture.This project focuses on the control plane, and is seeking to furtherdevelopment of a methodology for measuring the inherent security ofthe control plane component of existing and future routing protocols.The overall approach has a significant theoretical component: generalclasses of routing protocols are identified and they are beinganalyzed for their ability to monitor themselves. The technique ofStrong Detection is being used to reveal bounds on the kinds of errorsthat these classes of routing protocols can detect, thus identifyingcomplexity classes of routing protocols in terms of theirself-monitoring abilities.The work in this project contributes to an entirely new way ofevaluating the security level of a routing protocol. Strong Detectionis novel, not only in its ability to identify the existence of acontrol plane attack, but also in its ability to classify therobustness to attack of classes of routing protocols. The project willcontribute to the general area of routing security, which is necessaryto protect our networking infrastructure from deliberate or accidentaldamage.