EAGER-GENI Experiments on Network Security and Traffic Analysis

僵尸网络通常被用来对商业站点发动拒绝服务(DDoS)攻击。DDoS攻击可以使全球的关键基础设施瘫痪。目前几乎没有有效的对策。一组拟议的实验将量化导致DDoS漏洞的因素，并验证中和这些攻击的解决方案。此外，专制国家使用网络监控来识别和起诉他们的对手。匿名系统中的时间漏洞将专制政权中的持不同政见者置于潜在危险之中。匿名系统中的缺陷将被量化，一种保护隐私的新方法将被确认。Geni网络基础设施使安全研究成为可能，因为生产网络可能受到破坏。该项目将进行多项安全和隐私实验，其中包括：-WiMAX DDoS分析和方差分析，找到易受攻击的控制参数设置；-隐私/匿名性侧通道隐马尔可夫模型(HMM)将被推断为打破匿名系统；-DDoS流量测量，以映射攻击严重程度与网络拓扑；-在规模上测试的侧通道漏洞移除协议；以及-DDoS对策测试，以中和DDoS攻击。这项研究有能力改变网络安全和隐私方面的格局。研究生将有大量机会在网络基础设施上进行实验，使他们能够全面探索这些大规模的研究挑战。

Botnets are typically used to stage denial of service (DDoS) attacks against commercial sites. DDoS attacks can disable critical infrastructure across the globe. Few effective countermeasures exist. A proposed set of experiments will quantify factors responsible for DDoS vulnerability and will verify solutions for neutralizing those attacks. In addition, repressive nations use network monitoring to identify and prosecute their opponents. Timing vulnerabilities in anonymity systems put dissidents in repressive regimes in potential danger. Flaws in anonymity systems will be quantified and a new approach to safeguarding privacy will be confirmed.The GENI network infrastructure enables security research that has not been possible before due to potential disruption to production networks. This project will carry out a number of security and privacy experiments that include:-WiMAX DDoS analysis with analysis of variance finding vulnerable control parameter settings;-Privacy/Anonymity side-channel Hidden Markov Models (HMMs) will be inferred to break anonymity systems;-DDoS traffic measurement to map attack severity vs. network topology;-Side-channel vulnerability removal protocol tested at scale; and -DDoS countermeasure testing to neutralize DDoS attacks.This research has the ability to change the landscape in regards to network security and privacy. Graduate students will have abundant opportunities to carry out experiments on a network infrastructure that allows them to fully explore these research challenges at scale.