EAGER:Experimental Deployment of the ARTEMIS BGP Hijacking Detection Prototype in Research and Educational Networks

互联网存在影响全球路由安全的设计缺陷，使其面临一类大规模攻击，这些攻击可能导致大部分网络流量在地球仪上转移。 这些攻击的潜在影响-称为BGP劫持-可以从大规模窃听到身份欺骗或选择性内容修改。此外，实施这种攻击并不需要进入或接近受影响的链路和网络，这对国家安全构成越来越大的风险。最近，加州大学圣地亚哥分校CAIDA的研究人员提出了一种新的方法（称为ARTEMIS）来检测和缓解BGP劫持攻击，这种方法与最先进的方法截然不同，但网络运营商认为这种方法很有前途，更符合他们的需求。 在该项目中，研究人员在美国少数几个选定的支持教育、研究和其他非营利活动的运营商网络中进行了首次实验性的ARTEMIS辅助部署。 该项目为从主要基于理论基础和受控实验的原型过渡到运营商可以实际使用的真实的平台以保护其网络做出了重大贡献。 该项目还有助于提高参与该项目的网络的安全性，对我们社会至关重要的基础设施的安全产生直接的积极影响。该项目是研究人员与选定的研究和教育网络运营商之间的一个合作项目，目的是在其网络中试验性地部署实时环境监测信息系统的探测和减缓技术。 这种试验的主要目标是：㈠评价非洲实时环境监测信息系统的方法及其在真实的作战情况下的实施情况; ㈡了解和解决真实的部署技术问题;（三）培训运营商使用该工具，并为提高网络安全做出贡献。该奖项反映了NSF的法定使命，并通过使用基金会的智力价值进行评估，更广泛的影响审查标准。

The Internet suffers from a design flaw affecting the security of global routing, exposing it to a class of large-scale attacks that can cause significant portions of network traffic to be diverted across the globe. The potential impact of these attacks - known as BGP hijacking - can range from massive eavesdropping to identity spoofing or selective content modification. In addition, executing such attacks does not require access or proximity to the affected links and networks, posing increasing risks to national security. Recently, researchers at CAIDA, UC San Diego, proposed a novel methodology (called ARTEMIS) to detect and mitigate BGP hijacking attacks that is radically different from the state of the art but that network operators find promising and more in line with their needs. In this project, researchers carry out a first experimental assisted deployment of ARTEMIS in few selected operator networks supporting education, research and other no-profit activities in the US. This project significantly contributes to transitioning from a prototype mainly based on theoretical foundations and controlled experiments into a real platform that can be practically used by operators to secure their networks. The project also contributes to improving the security of networks participating in the project, with an immediate positive effect on the security of infrastructure critical to our society. This project is a collaboration among researchers and selected research and education network operators to carry out an experimental deployment of ARTEMIS detection and mitigation techniques in their networks. The main goals of such experimentation are: i) to evaluate the ARTEMIS methods and their implementation in real operational scenarios; ii) to learn and address real deployment technical issues; iii) to train operators in the use of the tool and contribute to improve the security of their networks.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.