CT-ISG: Pollution Resilience for Internet Caches

互联网缓存的污染恢复西北大学0627715摘要在当今的互联网中，对域名系统（DNS）条目、web甚至对等（p2p）内容的大多数请求不是由源服务器提供服务，而是由中间缓存提供服务。因此，它们对恶意攻击者构成了有吸引力的目标。该项目将在广泛的战线上解决针对缓存的拒绝服务攻击问题：（i）通过开发和研究新一代大规模针对缓存的污染攻击，（ii）通过设计创建可部署的防污染机制的基础知识，以及（iii）通过设计和实施针对三种迫在眉睫的威胁的反拒绝服务解决方案：针对web、p2p和本地DNS缓存的污染攻击。所提出的污染攻击对整个互联网社区提出了一个具有挑战性的问题：（i）它们能够降低整体网络性能，而不会淹没网络资源;（ii）它们具有危险级别的间接性;（iii）它们用不受欢迎的而不是伪造的文件污染该高速缓存;（iv）它们可以在比经典DoS攻击操作长得多的时间尺度上操作，并且因此对于最先进的反DoS方案是不可见的。通过利用数据流计算技术，我们的目标是通过显着减少需要维护的状态量来实现可扩展的解决方案，并使检测系统本身能够抵御DoS攻击。工业伙伴参与该项目将加速研究成果的转化。特别是，我们将与UltraDNS公司密切合作，该公司为全球超过20%的域名提供DNS服务，包括顶级域名以及众多私人组织。

Aleksandar KuzmanovicPollution Resilience for Internet CachesNorthwestern University0627715AbstractThe majority of requests for the Domain Name System (DNS) entries, web, or even peer-to-peer (p2p) content in today's Internet are not served by origin servers, but rather by intermediate caches. As such, they pose an attractive target for malicious attackers. This project will address the problem of cache-targeted DoS attacks on a broad front: (i) by developing and studying a new generation of large-scale cache-targeted pollution attacks, (ii) by designing fundamental knowledge in creating deployable anti-pollution mechanisms, and (iii) by designing and implementing counter-DoS solutions for three imminent threats: web, p2p, and local DNS cache-targeted pollution attacks.The proposed pollution attacks pose a challenging problem for the entire Internet community: (i) they are capable of degrading overall network performance without flooding network resources; (ii) they possess a dangerous level of indirection; (iii) they pollute the cache with unpopular, rather than bogus files; (iv) they may operate at much longer time-scales than classical DoS attacks operate and are thus invisible for state-of-the-art counter-DoS schemes. By leveraging data streaming computation techniques, our goal is to attain a scalable solution by significantly reducing the amount of state needed to maintain, and to make the detection system itself resilient to DoS attacks. The involvement of industrial partners in this project will accelerate the transfer of the research results into operation. In particular, we will collaborate closely with the UltraDNS Corporation which provides DNS services for over 20\% of the world domains, including top-level domains as well as numerous private organizations.