EAGER-GENI Experiments on Network Security and Traffic Analysis

EAGER-GENI 网络安全和流量分析实验

• 批准号: 1049765
• 负责人: Richard Brooks
• 金额: $ 10万
• 依托单位: Clemson University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-09-01 至 2013-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1049765&HistoricalAwards=false
• 关键词: EAGER; GENI; Experiments; Network; Security

Botnets are typically used to stage denial of service (DDoS) attacks against commercial sites. DDoS attacks can disable critical infrastructure across the globe. Few effective countermeasures exist. A proposed set of experiments will quantify factors responsible for DDoS vulnerability and will verify solutions for neutralizing those attacks. In addition, repressive nations use network monitoring to identify and prosecute their opponents. Timing vulnerabilities in anonymity systems put dissidents in repressive regimes in potential danger. Flaws in anonymity systems will be quantified and a new approach to safeguarding privacy will be confirmed.The GENI network infrastructure enables security research that has not been possible before due to potential disruption to production networks. This project will carry out a number of security and privacy experiments that include:-WiMAX DDoS analysis with analysis of variance finding vulnerable control parameter settings;-Privacy/Anonymity side-channel Hidden Markov Models (HMMs) will be inferred to break anonymity systems;-DDoS traffic measurement to map attack severity vs. network topology;-Side-channel vulnerability removal protocol tested at scale; and -DDoS countermeasure testing to neutralize DDoS attacks.This research has the ability to change the landscape in regards to network security and privacy. Graduate students will have abundant opportunities to carry out experiments on a network infrastructure that allows them to fully explore these research challenges at scale.

僵尸网络通常用于对商业网站进行拒绝服务（DDoS）攻击。DDoS攻击可以使地球仪的关键基础设施瘫痪。几乎没有有效的对策。一组拟议的实验将量化导致DDoS漏洞的因素，并验证中和这些攻击的解决方案。 此外，专制国家利用网络监控来识别和起诉他们的对手。匿名系统中的时间漏洞使专制政权中的持不同政见者处于潜在的危险之中。匿名系统中的缺陷将被量化，一种新的保护隐私的方法将被确认。GENI网络基础设施使安全研究成为可能，这在以前是不可能的，因为生产网络可能会中断。该项目将进行一系列安全和隐私实验，包括：-WiMAX DDoS分析，通过方差分析找到易受攻击的控制参数设置;-隐私/匿名侧信道隐马尔可夫模型（Hacks）将被推断为破坏匿名系统;-DDoS流量测量，以映射攻击严重性与网络拓扑结构;-侧信道漏洞消除协议进行大规模测试;和DDoS对策测试，以抵消DDoS攻击。这项研究有能力改变景观方面的网络安全和隐私。研究生将有大量的机会在网络基础设施上进行实验，使他们能够大规模地充分探索这些研究挑战。