Collaborative Research: NETS-NBD: RIDR: Towards Robust Inter-Domain Routing: Measurements, Models, and Deployable Tools

协作研究：NETS-NBD：RIDR：迈向稳健的域间路由：测量、模型和可部署工具

• 批准号: 0721736
• 负责人: Christos Faloutsos
• 金额: $ 24.5万
• 依托单位: Carnegie-Mellon University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-08-01 至 2011-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0721736&HistoricalAwards=false
• 关键词: Collaborative; Research; NETS; NBD; RIDR

Can ten or a hundred compromised BGP routers create Internet-wide instability? How how can we protect against it? BGP routing problems are hard to study, for the following reasons: (a) a lack of complete and accurate BGP topology, (b) difficulty in simulating with regards to computational complexity and accuracy, and (c) difficulty of deploying new tools to improve the BGP security.The goal of this project is exactly to address the above issues, and specifically to measure, model and guard against BGP routing problems. The overarching vision is to provide the foundation for not only improving the current BGP, but also for providing new insight and guidelines for the design of novel inter-domain routing approaches.The work focuses on three related research tasks. In the first task, the work will develop and maintain a relatively complete and accurate BGP topology as an ongoing effort and to generate small realistic topologies for simulations purposes, with provable topological properties. In the second task, the project will use and extend epidemic spreading techniques to model the network-wide propagation of BGP instability. In the third task, the project will develop a comprehensive reactive framework to detect erroneous BGP updates, which could be readily deployed today.Broader Impact. This work is an important step towards a more robust Internet. It is widely feared that the next generation of cyber-attacks could target the control plane. However, even today, BGP routing has its share of vulnerabilities and problems which cost millions of dollars in service disruption.

十或一百个受损的BGP路由器能否创造出网上范围的不稳定性？ 我们如何保护它？ 出于以下原因，很难研究BGP路由问题：（a）缺乏完整而准确的BGP拓扑，（b）在计算复杂性和准确性方面的模拟难度，以及（c）部署新工具来提高BGP安全性。 总体愿景是为不仅改善当前的BGP，还为设计新型新型域间路由方法设计新的见解和指南提供基础。这项工作侧重于三个相关的研究任务。 在第一项任务中，这项工作将开发和维持相对完整，准确的BGP拓扑，以持续的努力，并以可证明的拓扑特性生成小型现实拓扑。 在第二个任务中，该项目将使用并扩展流行病扩散技术来对BGP不稳定性的网络范围进行建模。 在第三个任务中，该项目将开发一个全面的反应性框架来检测错误的BGP更新，该框架今天可以很容易地部署。这项工作是迈向更强大的互联网的重要一步。 人们普遍担心下一代的网络攻击可以针对控制平面。 但是，即使在今天，BGP路线仍存在其漏洞和问题的份额，这些漏洞和问题造成了数百万美元的服务中断。