SBIR Phase I: An Integrated Solution to Internet Route Hijacking

这个小企业创新研究（SBIR）第一阶段项目建议开发一种有效的解决方案，用于互联网路由劫持检测、分析和缓解。互联网路由系统是全球互联网基础设施的关键组成部分，因为所有其他互联网功能都依赖于端到端数据传输的路由系统。不幸的是，当今的路由系统缺乏有效的安全保护，因此恶意攻击者可以宣布属于他人的网络地址，并有效地将数据流量转移到攻击者选择的位置。这种路由劫持攻击可以导致拒绝服务，使网站无法访问。如果这种攻击的目标是在线商务网站，24小时拒绝服务附加的经济损失可能是巨大的。路由劫持攻击还可以为各种其他更具破坏性的攻击打开大门，例如未经授权的流量捕获、身份盗窃、密码和信用卡信息被盗、金融欺诈和其他犯罪活动。基于学术界的前沿研究成果，公司提出了航线劫持的综合解决方案。该解决方案包括威胁感知、早期检测和自动恢复。最近的一项调查显示，路由劫持是当今网络运营商最关心的问题之一。虽然在网络安全市场的广阔领域有多个参与者，但提议的解决方案特别侧重于路由安全，公司拥有领先的解决方案。如果开发成功，该解决方案不仅可以检测劫持攻击，还可以从劫持攻击中恢复。如果部署，该公司有可能解决行业中的一个重大痛点。

This Small Business Innovation Research (SBIR) Phase I project proposes to develop an effective solution for Internet route hijack detection, analysis, and mitigation. The Internet routing system is a critical component in the global Internet infrastructure because all other Internet functions depend on the routing system for end-to-end data delivery. Unfortunately today's routing system lacks effective security protection, thus malicious attackers can announce network addresses belonging to others and effectively divert data traffic to locations of the attackers' choice. Such route hijack attacks can lead to denial of service that leaves web site unreachable. If the target of such an attack were online commerce web sites, the financial loss for a 24-hour denial of service attach could be significant. Route hijacking attacks can also open the door to a variety of other more devastating attacks, such as unauthorized traffic capture, identity theft, stolen passwords and credit card information, financial fraud, and other criminal activities. Based on cutting-edge research results from academe, the company proposes to develop an integrated solution to route hijacking. The solution consists of threat awareness, early detection, and automatic recovery. A recent survey showed that route hijacking is one of the top concerns among network operators today. Although there are multiple players in the broad area of network security market, the proposed solution focuses specifically on routing security where the company possess a leading-edge solution. If successfully developed, the solution not only can detect but also can recover from hijack attacks. If deployed, the company has the potential to address a significant pain point in the industry.