SBE: Small: Beyond technical solutions: Understanding the role of governance structures in Internet routing security

SBE：小：超越技术解决方案：了解治理结构在互联网路由安全中的作用

• 批准号: 1559991
• 负责人: Milton Mueller
• 金额: $ 19.77万
• 依托单位: Georgia Tech Research Corporation
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-08-01 至 2016-10-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1559991&HistoricalAwards=false
• 关键词: SBE; Small; Beyond; technical; solutions

Existing research on Internet routing security concentrates on technical solutions (new standards and protocols). This project is based on the premise that organizational and institutional factors - known as governance structures in institutional economics - are as important to Internet routing security as technological design. Internet routing involves decentralized decision making among tens of thousands of autonomous network operators. In this environment, an operator's decisions regarding implementation, organization and monitoring of routing policies powerfully affect the adoption and performance of security technologies.The research bridges a gap between computer science knowledge of routing and social science theories of organization and networked governance. The interdisciplinary method combines data sets from computer science quantifying the number of routing incidents with network analysis techniques and the insights of institutional economics. Quantitative and qualitative methods are used to assess the relationship between routing security incidents and the governance structures among Internet service providers (ISPs) that affect routing. The research also tests whether deployment of new routing security technologies (e.g. Resource Public Key Infrastructure, RPKI) actually affect the quantity and severity of routing incidents. Understanding correlations between governance structures and routing security is expected to yield important practical insights for network operators and policy makers in cyber-security. By compiling and rendering usable multiple data sources on routing incidents, the project will contribute to the infrastructure of social science research in cybersecurity. The PI will disseminate the data resources and research results to a broad constituency of academics, policy makers, network operators, industry practitioners, and advocacy groups.

现有的互联网路由安全研究主要集中在技术解决方案(新标准和新协议)上。该项目的前提是，组织和制度因素--在制度经济学中称为治理结构--对互联网路由安全的重要性与技术设计同等重要。互联网路由涉及到成千上万个自治网络运营商之间的分散决策。在这种环境下，运营商关于路由策略的实施、组织和监控的决策将有力地影响安全技术的采用和执行，研究在计算机科学的路由知识和社会科学的组织理论和网络治理之间架起了一座桥梁。这种跨学科的方法将来自计算机科学的数据集、网络分析技术和制度经济学的见解结合在一起，量化了路由事件的数量。采用定量和定性相结合的方法来评估影响路由的互联网服务提供商(ISP)之间的路由安全事件和治理结构之间的关系。该研究还测试了新的路由安全技术(如资源公钥基础设施，RPKI)的部署是否确实影响了路由事件的数量和严重程度。了解治理结构和路由安全之间的关系有望为网络运营商和政策制定者在网络安全方面提供重要的实践见解。通过汇编和提供关于路由事件的可用的多个数据源，该项目将有助于网络安全方面的社会科学研究的基础设施。该协会将把数据资源和研究成果传播给广大的学者、政策制定者、网络运营商、行业从业者和倡导团体。