EAGER-GENI Experiments on Network Security and Traffic Analysis

EAGER-GENI 网络安全和流量分析实验

• 批准号: 1049765
• 负责人: Richard Brooks
• 金额: $ 10万
• 依托单位: Clemson University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-09-01 至 2013-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1049765&HistoricalAwards=false
• 关键词: EAGER; GENI; Experiments; Network; Security

Botnets are typically used to stage denial of service (DDoS) attacks against commercial sites. DDoS attacks can disable critical infrastructure across the globe. Few effective countermeasures exist. A proposed set of experiments will quantify factors responsible for DDoS vulnerability and will verify solutions for neutralizing those attacks. In addition, repressive nations use network monitoring to identify and prosecute their opponents. Timing vulnerabilities in anonymity systems put dissidents in repressive regimes in potential danger. Flaws in anonymity systems will be quantified and a new approach to safeguarding privacy will be confirmed.The GENI network infrastructure enables security research that has not been possible before due to potential disruption to production networks. This project will carry out a number of security and privacy experiments that include:-WiMAX DDoS analysis with analysis of variance finding vulnerable control parameter settings;-Privacy/Anonymity side-channel Hidden Markov Models (HMMs) will be inferred to break anonymity systems;-DDoS traffic measurement to map attack severity vs. network topology;-Side-channel vulnerability removal protocol tested at scale; and -DDoS countermeasure testing to neutralize DDoS attacks.This research has the ability to change the landscape in regards to network security and privacy. Graduate students will have abundant opportunities to carry out experiments on a network infrastructure that allows them to fully explore these research challenges at scale.

僵尸网络通常用于对商业网站发起拒绝服务 (DDoS) 攻击。 DDoS 攻击可能会导致全球关键基础设施瘫痪。几乎没有有效的对策。拟议的一组实验将量化造成 DDoS 漏洞的因素，并验证消除这些攻击的解决方案。 此外，专制国家利用网络监控来识别和起诉他们的对手。匿名系统的时间漏洞使专制政权中的持不同政见者面临潜在危险。匿名系统中的缺陷将被量化，保护隐私的新方法将得到确认。GENI 网络基础设施使安全研究成为可能，这在以前由于生产网络的潜在中断而无法实现。该项目将进行许多安全和隐私实验，包括：-WiMAX DDoS 分析，通过方差分析发现易受攻击的控制参数设置；-将推断隐私/匿名侧信道隐马尔可夫模型 (HMM) 以破坏匿名系统；-DDoS 流量测量，以映射攻击严重性与网络拓扑；-大规模测试侧信道漏洞消除协议；-DDoS 流量测量，以映射攻击严重性与网络拓扑； -DDoS 对策测试，以抵消 DDoS 攻击。这项研究有能力改变网络安全和隐私方面的格局。研究生将有大量机会在网络基础设施上进行实验，使他们能够大规模地充分探索这些研究挑战。