CT-ISG: Collaborative Research: Router Models and Downscaling Tools

CT-ISG：协作研究：路由器模型和缩减工具

• 批准号: 0831068
• 负责人: George Kesidis
• 金额: $ 12.49万
• 依托单位: Pennsylvania State Univ University Park
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-10-01 至 2012-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0831068&HistoricalAwards=false
• 关键词: CT; ISG; Collaborative; Research; Router

National Science FoundationNSF Cyber Trust ProgramProposal Number: 0831068Principal Investigator: George KesidisInstitution: Pennsylvania State UniversityProposal Title: CT-ISG: Collaborative Research: Router Models and Downscaling Tools for Scalable Security ExperimentsProject Summary It is critical to protect the Internet from attacks such as denial of service, and attacks on inter-domain routing. Although several defenses have been proposed, actual deployments have been limited. A primary reason for this lack of deployment is that most defenses have not been validated under realistic conditions, or at sufficiently large scales. Many attacks also have second-order effects that are not well understood. This is because it is difficult to incorporate all the protocols involved at any reasonable scale in analytical, simulation, or emulation models or testbeds. This project includes two complementary efforts to address both the fidelity and scale challenges in security experiments by designing the following: (1) Router models: High-fidelity yet scalable models for routers and other devices will be designed that are based on simple device measurements under a few well-crafted scenarios. Both the queueing behavior in the data plane and resource consumption in the control plane will be considered. (2) Downscaling tools: Techniques will be developed to simplify experimental scenarios before studying them using simulation, emulation, or testbed experiments. Algorithms that can downscale an experimental scenario while still preserving the important queueing or routing characteristics of this scenario will be devised. Broader Impact: Development and public dissemination of general- purpose experimental tools, large-scale testing techniques, methodologies for the use of testing frameworks, and related graduate- level courseware will be undertaken. Significant outreach is planned to simulation and testbed teams, e.g., ns-3, C-BGP, and DETER (based on Emulab), and to industry, specifically Cisco, Intel, and AT&T. Students from under-represented minority groups in computer science and electrical engineering will be actively involved.

National Science FoundationNSF Cyber​​ Trust ProgramProposal Number: 0831068Principal Investigator: George KesidisInstitution: Pennsylvania State UniversityProposal Title: CT-ISG: Collaborative Research: Router Models and Downscaling Tools for Scalable Security ExperimentsProject Summary It is critical to protect the Internet from attacks such as denial of service, and attacks on inter-domain routing.尽管已经提出了几种防御，但实际部署受到限制。缺乏部署的主要原因是，在现实条件下或足够大的规模下，大多数防御措施尚未得到验证。许多攻击也具有二阶效果，这些效应尚不清楚。这是因为很难在分析，仿真或仿真模型或测试台中纳入任何合理量表中涉及的所有协议。该项目包括两项补充努力，通过设计以下内容来应对安全实验中的忠诚度和规模挑战：（1）路由器模型：将设计基于一些精心设计精良的场景下的简单设备测量值的路由器和其他设备的高保真但可扩展的模型。将考虑数据平面中的排队行为和控制平面中的资源消耗。 （2）缩小工具：将开发技术来简化实验场景，然后使用模拟，仿真或测试床实验研究它们。可以设计这种方案的重要排队或路由特征的同时，可以设计出可以降低实验场景的算法。更广泛的影响：将开发通用实验工具的开发和公开传播，大规模测试技术，用于使用测试框架的方法和相关研究生课程的方法。计划进行大量的外展活动，例如NS-3，C-BGP和DETER（基于Emulab），以及行业，特别是Cisco，Intel和AT＆T。来自代表性不足的计算机科学和电气工程少数群体的学生将积极参与。