Collaborative Research: NETS-NBD: RIDR: Towards Robust Inter-Domain Routing: Measurements, Models, and Deployable Tools

协作研究：NETS-NBD：RIDR：迈向稳健的域间路由：测量、模型和可部署工具

• 批准号: 0721736
• 负责人: Christos Faloutsos
• 金额: $ 24.5万
• 依托单位: Carnegie-Mellon University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-08-01 至 2011-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0721736&HistoricalAwards=false
• 关键词: Collaborative; Research; NETS; NBD; RIDR

Can ten or a hundred compromised BGP routers create Internet-wide instability? How how can we protect against it? BGP routing problems are hard to study, for the following reasons: (a) a lack of complete and accurate BGP topology, (b) difficulty in simulating with regards to computational complexity and accuracy, and (c) difficulty of deploying new tools to improve the BGP security.The goal of this project is exactly to address the above issues, and specifically to measure, model and guard against BGP routing problems. The overarching vision is to provide the foundation for not only improving the current BGP, but also for providing new insight and guidelines for the design of novel inter-domain routing approaches.The work focuses on three related research tasks. In the first task, the work will develop and maintain a relatively complete and accurate BGP topology as an ongoing effort and to generate small realistic topologies for simulations purposes, with provable topological properties. In the second task, the project will use and extend epidemic spreading techniques to model the network-wide propagation of BGP instability. In the third task, the project will develop a comprehensive reactive framework to detect erroneous BGP updates, which could be readily deployed today.Broader Impact. This work is an important step towards a more robust Internet. It is widely feared that the next generation of cyber-attacks could target the control plane. However, even today, BGP routing has its share of vulnerabilities and problems which cost millions of dollars in service disruption.

十个或一百个受损的BGP路由器会造成整个互联网的不稳定吗？我们怎样才能预防它呢？BGP路由问题很难研究，主要有以下几个原因：(1)缺乏完整和准确的BGP拓扑结构；(2)在计算复杂性和准确性方面难以模拟；(3)难以部署新的工具来提高BGP的安全性。本项目的目标正是解决上述问题，特别是对BGP路由问题进行度量、建模和防范。总体愿景是为改进当前的BGP提供基础，同时也为设计新的域间路由方法提供新的见解和指导。本工作主要围绕三个相关的研究任务展开。在第一个任务中，该工作将开发和维护一个相对完整和准确的BGP拓扑，作为一项持续的工作，并生成用于仿真目的的小型现实拓扑，具有可证明的拓扑特性。在第二项任务中，该项目将使用并扩展流行病传播技术来模拟BGP不稳定性的全网传播。在第三项任务中，该项目将开发一个全面的响应式框架，以检测错误的BGP更新，该框架现在可以很容易地部署。更广泛的影响。这项工作是朝着更强大的互联网迈出的重要一步。人们普遍担心，下一代网络攻击可能以控制平面为目标。然而，即使在今天，BGP路由也存在漏洞和问题，导致数百万美元的服务中断。