Collaborative Research: NETS-NBD: RIDR: Towards Robust Inter-Domain Routing: Measurements, Models, and Deployable Tools

十个或一百个受损的BGP路由器会在互联网范围内造成不稳定吗？我们如何才能防范它呢？BGP路由问题的研究比较困难，主要原因有：(A)缺乏完整准确的BGP拓扑结构；(B)在计算复杂性和准确性方面难以模拟；(C)难以采用新的工具来提高BGP的安全性。本项目的目的正是为了解决上述问题，特别是测量、建模和预防BGP路由问题。总体愿景是不仅为改进现有的BGP协议提供基础，而且为设计新的域间路由方法提供新的见解和指导。在第一个任务中，这项工作将开发和维护一个相对完整和准确的BGP拓扑，作为一项持续的努力，并生成用于模拟目的的具有可证明的拓扑性质的小型真实拓扑。在第二项任务中，该项目将使用和扩展流行病传播技术来模拟BGP不稳定性在网络范围内的传播。在第三项任务中，该项目将开发一个全面的反应性框架来检测错误的BGP更新，该框架今天可以很容易地部署。这项工作是朝着更强大的互联网迈出的重要一步。人们普遍担心，下一代网络攻击可能会以控制飞机为目标。然而，即使在今天，BGP路由也存在着一些漏洞和问题，这些漏洞和问题会导致数百万美元的服务中断。

Can ten or a hundred compromised BGP routers create Internet-wide instability? How how can we protect against it? BGP routing problems are hard to study, for the following reasons: (a) a lack of complete and accurate BGP topology, (b) difficulty in simulating with regards to computational complexity and accuracy, and (c) difficulty of deploying new tools to improve the BGP security.The goal of this project is exactly to address the above issues, and specifically to measure, model and guard against BGP routing problems. The overarching vision is to provide the foundation for not only improving the current BGP, but also for providing new insight and guidelines for the design of novel inter-domain routing approaches.The work focuses on three related research tasks. In the first task, the work will develop and maintain a relatively complete and accurate BGP topology as an ongoing effort and to generate small realistic topologies for simulations purposes, with provable topological properties. In the second task, the project will use and extend epidemic spreading techniques to model the network-wide propagation of BGP instability. In the third task, the project will develop a comprehensive reactive framework to detect erroneous BGP updates, which could be readily deployed today.Broader Impact. This work is an important step towards a more robust Internet. It is widely feared that the next generation of cyber-attacks could target the control plane. However, even today, BGP routing has its share of vulnerabilities and problems which cost millions of dollars in service disruption.