Collaborative Research: NETS-NBD: RIDR: Towards Robust Inter-Domain Routing: Measurements, Models, and Deployable Tools

协作研究：NETS-NBD：RIDR：迈向稳健的域间路由：测量、模型和可部署工具

• 批准号: 0721736
• 负责人: Christos Faloutsos
• 金额: $ 24.5万
• 依托单位: Carnegie-Mellon University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-08-01 至 2011-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0721736&HistoricalAwards=false
• 关键词: Collaborative; Research; NETS; NBD; RIDR

Can ten or a hundred compromised BGP routers create Internet-wide instability? How how can we protect against it? BGP routing problems are hard to study, for the following reasons: (a) a lack of complete and accurate BGP topology, (b) difficulty in simulating with regards to computational complexity and accuracy, and (c) difficulty of deploying new tools to improve the BGP security.The goal of this project is exactly to address the above issues, and specifically to measure, model and guard against BGP routing problems. The overarching vision is to provide the foundation for not only improving the current BGP, but also for providing new insight and guidelines for the design of novel inter-domain routing approaches.The work focuses on three related research tasks. In the first task, the work will develop and maintain a relatively complete and accurate BGP topology as an ongoing effort and to generate small realistic topologies for simulations purposes, with provable topological properties. In the second task, the project will use and extend epidemic spreading techniques to model the network-wide propagation of BGP instability. In the third task, the project will develop a comprehensive reactive framework to detect erroneous BGP updates, which could be readily deployed today.Broader Impact. This work is an important step towards a more robust Internet. It is widely feared that the next generation of cyber-attacks could target the control plane. However, even today, BGP routing has its share of vulnerabilities and problems which cost millions of dollars in service disruption.

10个或100个受损的BGP路由器会造成整个互联网的不稳定吗？ 我们该如何防范它？ BGP路由问题是一个很难研究的问题，其原因在于：（a）缺乏完整和精确的BGP拓扑结构;（B）在计算复杂度和准确性方面难以模拟;（c）难以部署新的工具来提高BGP的安全性。 总体愿景是提供的基础，不仅改善目前的BGP，但也提供了新的见解和指导方针的设计新的域间路由approaches.The工作集中在三个相关的研究任务。 在第一个任务中，工作将开发和维护一个相对完整和准确的BGP拓扑作为一个持续的努力，并生成小的现实拓扑模拟的目的，可证明的拓扑属性。 在第二个任务中，该项目将使用和扩展流行病传播技术来模拟BGP不稳定性的网络范围传播。 在第三项任务中，该项目将开发一个全面的反应框架，以检测错误的BGP更新，该框架今天就可以部署。这项工作是朝着更强大的互联网迈出的重要一步。 人们普遍担心，下一代网络攻击可能会针对控制平面。 然而，即使在今天，BGP路由也有其漏洞和问题，这些漏洞和问题会导致数百万美元的服务中断。