EAGER: Exploring Security Issues in Next-Generation Networking Infrastructure

EAGER：探索下一代网络基础设施中的安全问题

• 批准号: 0952524
• 负责人: Tilman Wolf
• 金额: $ 10万
• 依托单位: University of Massachusetts Amherst
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-01-01 至 2011-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0952524&HistoricalAwards=false
• 关键词: EAGER; Exploring; Security; Issues; Next

The Internet provides data communication that is essential for business, personal communication, E-Government, and entertainment. Our society's reliance on the broad availability of data communication networks makes these system a critical part of today's infrastructure. The need to support emerging technologies and networking paradigms has led to numerous ongoing efforts to develop novel network architectures that can improve and replace existing network systems. Many new network designs use a virtualized network infrastructure on which networks with different protocol stacks can be instantiated. To implement such dynamic deployment of data communication networks, programmable routers with embedded packet processing systems are used. The introduction of these new systems into the network opens the doors for new cyber attacks that use the network or target the network itself.This work will study the security issues that arise in this new virtualized and programmable networking environment and develop techniques that can be used to identify, mitigate, and possibly avoid attacks. The researchers will study how attacks can be characterized in next-generation network and how novel anomaly detection algorithms can be developed. The algorithms will use cooperation between protocol layers and distributed detection mechanisms between nodes and autonomous systems to achieve high detection capabilities that aid in defending the network infrastructure. The ability of programmable nodes to aid in the detection process will be leveraged.The intellectual merit of this work lies in providing insights on vulnerabilities and possible defenses in emerging network designs, which are fundamentally different from today's Internet.The broader impact of this work aims at providing the technology necessary to protecting the next-generation Internet from cyber attacks.

Internet提供了对商业、个人通信、电子政务和娱乐至关重要的数据通信。我们的社会对广泛可用的数据通信网络的依赖使这些系统成为当今基础设施的重要组成部分。由于需要支持新兴技术和网络范例，因此需要不断努力开发能够改进和取代现有网络系统的新型网络体系结构。许多新的网络设计使用虚拟化的网络基础设施，在该基础设施上可以实例化具有不同协议栈的网络。为了实现这种数据通信网络的动态部署，使用了带有嵌入式分组处理系统的可编程路由器。将这些新系统引入网络，为利用网络或以网络本身为目标的新网络攻击打开了大门。这项工作将研究在这种新的虚拟化和可编程网络环境中出现的安全问题，并开发可用于识别、减轻和可能避免攻击的技术。研究人员将研究如何在下一代网络中表征攻击，以及如何开发新的异常检测算法。该算法将使用协议层之间的合作以及节点和自治系统之间的分布式检测机制，以实现有助于保护网络基础设施的高检测能力。将利用可编程节点的能力来帮助检测过程。这项工作的智力价值在于提供了对新兴网络设计中的漏洞和可能的防御的见解，这些设计与今天的互联网根本不同。这项工作的更广泛影响是提供必要的技术，以保护下一代互联网免受网络攻击。