Collaborative Research: CT-T: Toward a More Accountable Internet

合作研究：CT-T：迈向更负责任的互联网

• 批准号: 0716287
• 负责人: David Andersen
• 金额: $ 30万
• 依托单位: Carnegie-Mellon University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-08-01 至 2010-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0716287&HistoricalAwards=false
• 关键词: Collaborative; Research; CT; Toward; More

Proposal Number: 0716342PI: Scott ShenkerInstitution: International Computer Science Institute, University of California BerkeleyLeadProposal Number: 0716278PI: Nicholas FeamsterInstitution: Georgia Institute of TechnologySubProposal Number: 0716287PI: David AndersenInstitution: Carnegie Mellon UniversitySubProposal Number 0716273PI: Hari BalakrishnanInstitution: Massachusetts Institute of TechnologySubTitle: Collaborative Research CT-T: Towards a More Accountable InternetAbstractThe goal of this project is to design, implement, and test an internetwork architecture called the Accountable Internet Protocol (AIP). AIP retains much of the elegance and simplicity of IP, but is far better equipped to thwart malicious adversaries. To provide this protection, AIP incorporates three kinds of accountability: source accountability, control-plane accountability, and dataplane accountability. Together, these three forms of accountability ensure that any host, router, and autonomous network can identify misbehaving components.Operationally, this results in: an Internet in which any spoofing or forgery of source addresses is detectable (from source accountability); a partial defense against flooding attacks from compromised hosts (also from source accountability); an Internet where route hijacking and other security compromises to inter-domain routing are impossible (from control-plane accountability); and the ability for end hosts and operators to pinpoint locations where packets are being lost or excessively delayed even when the problems are in other networks (from data-plane accountability).The cornerstone of AIP is its use of a self-certifying address format. All AIP addresses are of the form AD:EID, where AD is the identifier for the autonomous domain that the host belongs to, and EID is a globally unique host identifier. Both address components are derived from public keys held by the domain and host, respectively, allowing other entities to verify the authenticity and provenance of packets and messages. AIP's self-certifying addressing allows simple protocols to realize the above benefits.

提案编号：0716342 PI：Scott Shenker机构：加州大学伯克利分校国际计算机科学研究所领导提案编号：0716278 PI：Nicholas Feamster机构：格鲁吉亚理工学院子提案编号：0716287 PI：大卫安德森机构：卡内基梅隆大学子提案编号：0716273 PI：Hari Balakrishnan机构：马萨诸塞州理工学院子标题：协作研究CT-T：本项目的目标是设计、实现和测试一种称为可负责的互联网协议（AIP）的互联网体系结构。AIP保留了IP的许多优雅和简单性，但在阻止恶意对手方面要好得多。为了提供这种保护，AIP结合了三种责任：源责任、控制平面责任和数据平面责任。这三种形式的问责制共同确保任何主机、路由器和自治网络都可以识别行为不当的组件。（来源责任）;对来自受损主机的洪水攻击的部分防御（也来自源责任）;不可能对域间路由进行路由劫持和其他安全妥协的互联网（来自控制平面责任制）;终端主机和操作员能够精确定位数据包丢失或过度延迟的位置，即使问题发生在其他网络中（来自数据平面问责制）。AIP的基石是其使用自我证明地址格式。所有AIP地址的格式都是AD：EID，其中AD是主机所属的自治域的标识符，EID是全局唯一的主机标识符。这两个地址组件分别从域和主机持有的公钥中导出，允许其他实体验证数据包和消息的真实性和来源。AIP的自认证寻址允许简单的协议实现上述优点。