SaTC: CORE: Large: Collaborative: Investigating the Susceptibility of the Internet Topology to Country-level Connectivity Disruption and Manipulation

SaTC：核心：大型：协作：调查互联网拓扑对国家级连接中断和操纵的敏感性

• 批准号: 2202288
• 负责人: Alberto Dainotti
• 金额: $ 102.67万
• 依托单位: Georgia Tech Research Corporation
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2021
• 资助国家: 美国
• 起止时间: 2021-10-01 至 2022-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2202288&HistoricalAwards=false
• 关键词: SaTC; CORE; Large; Collaborative; Investigating

Malicious actors such as hackers, terrorists or nation-states can disrupt, intercept or manipulate the Internet traffic of entire countries or regions by targeting structural weaknesses of the Internet. Strategic physical locations exist in the Internet topology. Despite much recent interest and a large body of research on cyber-attack vectors and mechanisms, we lack rigorous tools to reason about how the Internet topology of a country or region exposes its critical communication infrastructure to compromise through targeted attacks. This project develops methodologies to identify potential topological weaknesses of the Internet infrastructure, especially from the perspective of an attacker, and to quantify the potential impact if attackers were to compromise these critical elements. The broader impacts of this project are substantial: understanding structural weaknesses in the Internet topology of countries or regions is of significant interest not just to the research and operational communities, but also to everyday Internet users and policy bodies. More generally, it will secure the critical Internet infrastructure on which our daily activities depend.This project is a two-phase project. In the first phase, the goal is identifying important components of the Internet topology of a country and region --- Autonomous Systems, Internet Exchange Points, colocation facilities, and physical cable systems that represent key locations of the Internet. The project will undertake a novel multi-layer mapping effort, developing measurement and analysis techniques to discover these components and the relationships between them. The second phase of the project utilizes the multi-layer map and develops methods to identify components that represent potential topological weaknesses, i.e., compromising a few such components would allow an attacker to disrupt, manipulate, or eavesdrop on a large fraction of Internet traffic of that country. The multi-layer view of the system will enable an assessment of weaknesses holistically as well as at specific layers, under various assumptions about the capabilities and knowledge of attackers. Geographic annotations will enable a consideration of risks related to the geographic distribution of critical components of the communication infrastructure.

黑客、恐怖分子或民族国家等恶意行为者可以针对互联网的结构性弱点，破坏、拦截或操纵整个国家或地区的互联网流量。Internet拓扑中存在战略物理位置。尽管最近对网络攻击媒介和机制有很多兴趣和大量研究，但我们缺乏严格的工具来推理一个国家或地区的互联网拓扑如何通过有针对性的攻击暴露其关键通信基础设施。该项目开发的方法，以确定潜在的拓扑弱点的互联网基础设施，特别是从攻击者的角度来看，并量化的潜在影响，如果攻击者要妥协这些关键元素。这一项目的广泛影响是巨大的：了解国家或区域互联网拓扑结构的结构弱点不仅对研究和业务界，而且对日常互联网用户和政策机构都具有重大意义。更广泛地说，它将确保我们日常活动所依赖的重要互联网基础设施的安全。在第一阶段，目标是确定一个国家和地区的互联网拓扑结构的重要组成部分-自治系统，互联网交换点，托管设施和代表互联网关键位置的物理电缆系统。该项目将进行一项新的多层绘图工作，开发测量和分析技术，以发现这些组件及其之间的关系。该项目的第二阶段利用多层地图，并开发方法来识别代表潜在拓扑弱点的组件，即，对一些这样的组件进行妥协将允许攻击者破坏、操纵或窃听该国的大部分互联网流量。该系统的多层视图将能够在对攻击者的能力和知识的各种假设下，对整体以及特定层的弱点进行评估。地理注释将有助于考虑与通信基础设施关键组成部分的地理分布有关的风险。

项目成果

Improving the Inference of Sibling Autonomous Systems

改进兄弟自治系统的推理

• 发表时间: 2023
• 期刊: Passive and Active Measurement Conference (PAM
• 作者: Chen, Z.;Bischof, Z.;Testart, C.;Dainotti, A.
• 通讯作者: Dainotti, A.

iGDB: connecting the physical and logical layers of the internet

iGDB：连接互联网的物理层和逻辑层

• DOI: 10.1145/3517745.3561443
• 发表时间: 2022
• 期刊: ACM Internet Measurement Conference (IMC
• 作者: Anderson, Scott;Salamatian, Loqman;Bischof, Zachary S.;Dainotti, Alberto;Barford, Paul
• 通讯作者: Barford, Paul

Identifying ASes of state-owned internet operators

• DOI: 10.1145/3487552.3487822
• 发表时间: 2021-11
• 期刊: Proceedings of the 21st ACM Internet Measurement Conference
• 作者: Esteban Carisimo;Alexander Gamero-Garrido;A. Snoeren;A. Dainotti

Quantifying Nations Exposure to Traffic Observation and Selective Tampering

• DOI: 10.1007/978-3-030-98785-5_29
• 发表时间: 2021-10
• 期刊: ArXiv
• 作者: Alexander Gamero-Garrido;Esteban Carisimo;Shuai Hao;B. Huffaker;A. Snoeren;A. Dainotti

Attack or Block? Repertoires of Digital Censorship in Autocracies

攻击还是格挡？

• DOI: 10.1080/19331681.2022.2037118
• 发表时间: 2023
• 期刊: Journal of Information Technology & Politics
• 影响因子: 2.6
• 作者: Kawerau, Lukas;Weidmann, Nils B.;Dainotti, Alberto
• 通讯作者: Dainotti, Alberto