TC: Small: Securing the Router Infrastructure of the Internet

互联网代表了需要保护的基本通信基础设施，以防止恶意攻击。现有的许多攻击和相应的防御机制都是针对连接到Internet的计算机，而不是针对网络基础设施本身。然而，网络也可能受到攻击，因为现代网络组件使用的软件和硬件组件可能显示出以前没有研究过的漏洞。本项目探讨了这种新型的网络内攻击，并开发了一种基于硬件监控技术的新方法来提供网络硬件的基本安全功能。本研究的目标是显著提高对互联网基础设施中新出现的漏洞的理解，并开发一种硬件监控系统，可以检测和阻止整个类别的新攻击，以维持一个可操作的互联网。对受保护路由器平台的设计、实现和操作的研究对于互联网的持续成功至关重要。此外，该项目将代表性不足的少数民族和本科生纳入研究，开发教学组件，并通过研究生培训促进劳动力发展。

The Internet represents essential communication infrastructure that needs to be protected from malicious attacks. Many existing attacks and corresponding defense mechanisms have focused on the computers connected to the Internet rather than the network infrastructure itself. However, the network can also be attacked since modern network components use software and hardware components that can exhibit vulnerabilities that have not been previously studied. This project explores this new type of in-network attacks and develops a novel approach to providing fundamental security capabilities in networking hardware based on hardware monitoring techniques.The goals of this research are to significantly improve the understanding of emerging vulnerabilities in the Internet infrastructure and to develop a hardware monitoring system that can detect and stop an entire class of new attacks in order to maintain an operational Internet. This research on the design, implementation, and operation of protected router platforms is essential for the continued success of the Internet. In addition, this project integrates underrepresented minority and undergraduate students into research, develops instructional components, and contributes to workforce development through graduate student training.