CT-ISG: PacketSpread: Practical Network Capabilities

提案0714277 CT-ISG：数据包传播;实用网络能力Angelos Keromytis哥伦比亚大学网络拒绝服务攻击发生的频率越来越高，对目标站点及其用户造成毁灭性的经济和心理影响。解决这个问题已经被证明是困难的，主要是由于部署和以前提出的机制的复杂性问题。特别是，接收器控制的能力是一个优雅的方式来防止通信干扰，但在实践中很难部署，容易受到控制信道攻击。本项目正在研究一种新的通信范式，命名为PacketSpread，这使得可行的使用能力，如mon当前的互联网，而不需要架构修改的网络或主机。该研究的高级假设是，可以通过使用端点流量重定向机制来构建实用的网络能力方案，该机制使用由覆盖网络启用的类扩频通信范例。为了验证这一假设，该项目正在对这种方案进行原型设计和实验验证，以抵抗现实对手发起的攻击，同时最大限度地减少该方法对端到端通信延迟和吞吐量的影响。这项研究的结果将使人们更好地了解如何部署网络能力方案，并用于在正常操作和危机时刻提供稳健和安全的通信。 社会、企业、政府和个人所依赖的大型系统的安全性和可靠性的提高将对社会产生积极的影响。

Proposal 0714277CT-ISG: PacketSpread; Practical Network CapabilitiesAngelos KeromytisColumbia UniversityNetwork denial of service attacks occur with increasing frequency anddevastating economic and psychological effects for the targeted sitesand their users. Addressing the problem has proven difficult, primarilydue to deployment and complexity concerns about previously proposedmechanisms. In particular, receiver-controlled capabilities are anelegant way for preventing communication interference, but aredifficult to deploy in practice and are susceptible to control-channelattacks.This project is investigating a new communication paradigm, namedPacketSpread, which makes feasible the use of capability-like mechanismson the current Internet, without requiring architectural modificationsto networks or hosts. The high-level hypothesis of the research is thatpractical network capability schemes can be constructed through theuse of end-point traffic-redirection mechanisms that use aspread-spectrum-like communication paradigm enabled by an overlaynetwork. To test this hypothesis, the project is prototyping andexperimentally validating the resistance of such a scheme againstattacks launched by realistic adversaries, while minimizing theimpact of the approach to end-to-end communication latency andthroughput.The results of this research will enable a better understanding hownetwork-capability schemes can be deployed and used to provide robustand secure communications under both normal operation and in times ofcrisis. Improvements in the security and reliability of large-scalesystems on which society, business, government, and individuals dependon will have a positive impact on society.