TC: Small: Securing the Router Infrastructure of the Internet

TC：小型：保护互联网路由器基础设施的安全

• 批准号: 1115999
• 负责人: Tilman Wolf
• 金额: $ 50万
• 依托单位: University of Massachusetts Amherst
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-09-01 至 2015-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1115999&HistoricalAwards=false
• 关键词: TC; Small; Securing; Router; Infrastructure

The Internet represents essential communication infrastructure that needs to be protected from malicious attacks. Many existing attacks and corresponding defense mechanisms have focused on the computers connected to the Internet rather than the network infrastructure itself. However, the network can also be attacked since modern network components use software and hardware components that can exhibit vulnerabilities that have not been previously studied. This project explores this new type of in-network attacks and develops a novel approach to providing fundamental security capabilities in networking hardware based on hardware monitoring techniques.The goals of this research are to significantly improve the understanding of emerging vulnerabilities in the Internet infrastructure and to develop a hardware monitoring system that can detect and stop an entire class of new attacks in order to maintain an operational Internet. This research on the design, implementation, and operation of protected router platforms is essential for the continued success of the Internet. In addition, this project integrates underrepresented minority and undergraduate students into research, develops instructional components, and contributes to workforce development through graduate student training.

互联网是重要的通信基础设施，需要保护其免受恶意攻击。许多现有的攻击和相应的防御机制都集中在连接到互联网的计算机上，而不是网络基础设施本身。然而，网络也可能受到攻击，因为现代网络组件使用的软件和硬件组件可能会表现出以前未研究过的漏洞。该项目探索了这种新型的网络内攻击，并开发了一种基于硬件监控技术为网络硬件提供基本安全功能的新颖方法。这项研究的目标是显着提高对互联网基础设施中新兴漏洞的理解，并开发一个可以检测和阻止整类新攻击的硬件监控系统，以维持互联网的运行。对受保护路由器平台的设计、实现和操作的研究对于互联网的持续成功至关重要。此外，该项目将代表性不足的少数族裔和本科生纳入研究，开发教学内容，并通过研究生培训促进劳动力发展。