EAGER:Experimental Deployment of the ARTEMIS BGP Hijacking Detection Prototype in Research and Educational Networks

互联网存在一个影响全球路由安全性的设计缺陷，使其暴露于一类大规模攻击之下，这些攻击可能导致很大一部分网络流量被转移到全球各地。这些攻击（称为BGP劫持）的潜在影响可以从大规模窃听到身份欺骗或选择性内容修改。此外，执行此类攻击不需要访问或接近受影响的链路和网络，这对国家安全构成了越来越大的风险。最近，加州大学圣地亚哥分校CAIDA的研究人员提出了一种新的方法（称为ARTEMIS）来检测和减轻BGP劫持攻击，这种方法与目前的技术完全不同，但网络运营商发现它很有前途，而且更符合他们的需求。在这个项目中，研究人员在少数几个选定的运营商网络中进行了首次实验性的ARTEMIS部署，以支持美国的教育、研究和其他非营利活动。该项目对从主要基于理论基础和控制实验的原型过渡到可被运营商实际使用以保护其网络的真实平台具有重要贡献。该项目还有助于提高参与项目的网络的安全性，对我们社会至关重要的基础设施的安全产生直接的积极影响。该项目是研究人员与选定的研究和教育网络运营商之间的合作，目的是在其网络中实验性地部署ARTEMIS检测和缓解技术。此类实验的主要目标是：i)评估ARTEMIS方法及其在实际操作场景中的实施；Ii)学习和解决实际部署技术问题；Iii)培训操作员如何使用该工具，并有助于提高其网络的安全性。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The Internet suffers from a design flaw affecting the security of global routing, exposing it to a class of large-scale attacks that can cause significant portions of network traffic to be diverted across the globe. The potential impact of these attacks - known as BGP hijacking - can range from massive eavesdropping to identity spoofing or selective content modification. In addition, executing such attacks does not require access or proximity to the affected links and networks, posing increasing risks to national security. Recently, researchers at CAIDA, UC San Diego, proposed a novel methodology (called ARTEMIS) to detect and mitigate BGP hijacking attacks that is radically different from the state of the art but that network operators find promising and more in line with their needs. In this project, researchers carry out a first experimental assisted deployment of ARTEMIS in few selected operator networks supporting education, research and other no-profit activities in the US. This project significantly contributes to transitioning from a prototype mainly based on theoretical foundations and controlled experiments into a real platform that can be practically used by operators to secure their networks. The project also contributes to improving the security of networks participating in the project, with an immediate positive effect on the security of infrastructure critical to our society. This project is a collaboration among researchers and selected research and education network operators to carry out an experimental deployment of ARTEMIS detection and mitigation techniques in their networks. The main goals of such experimentation are: i) to evaluate the ARTEMIS methods and their implementation in real operational scenarios; ii) to learn and address real deployment technical issues; iii) to train operators in the use of the tool and contribute to improve the security of their networks.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.