SCI: ITR - (NHS + EVS) - (dmc + SIM) : Improving the Integrity of Domain Name System (DNS) Monitoring and Protection

该提案概述了为监测和研究互联网基础设施中最重要的组成部分之一-域名系统-所作的努力，域名系统的故障将使互联网无法使用。SDSC的CAIDA测量小组正在与互联网系统联盟（ISC）、BIND的维护者和DNS的F根服务器合作，执行一系列任务。这些任务包括：建立一个长期的测量基础设施，支持软件工具，以测量和了解根DNS系统的行为;研究一系列关于DNS的研究问题，如给定根和/或客户端的任播的影响，DNS流量中的异常识别;描述到达根名称服务器的流量;理解虚假的RFC 1918（私有地址空间）流量;如何自动识别单向查询; DNSSEC的流量影响;全局DNS上下文中的DNS解析器行为;以及根服务器性能和连接特性。这项工作以及相关的推广活动的总和，旨在随着时间的推移，在社区加强和保护DNS方面发挥重要作用。知识价值和更广泛的影响：该提案的智力价值在于它如何解决国家和国土安全部（NHS）相关的建议，以发展一个“网络空间网络运营中心（NOC）”，以及其长期的，长期使命是提供支持DNS研究所需的数据，这些研究与真实的互联网以及它如何支持经济繁荣和充满活力的公民社会（ECS）有关。拟议的工作对ITR征集中的所有三个国家优先领域都有广泛的影响：（1）它通过提供来自互联网核心组件的真实的数据来促进互联网研究领域的完整性，否则这些数据不适合测量或建模。(2)一个依赖于互联网的全球经济是一个依赖于域名服务正常和安全工作的全球经济。保护自己免受DNS基础设施中的漏洞的影响将减少国家和全球风险。(3)DNS-OARC将通过提供一个协作知识环境来加强国家和国际安全，在该环境中建立和完善应急响应机制，并开发新技术来预防、归因和补救影响DNS的恶意或其他行为不端的代理。

This proposal outlines an effort to monitor and study one of the Internet's most important elements of infrastructure whose failure would render the Internet unusable: the Domain Name System (DNS). The CAIDA measurement group from SDSC is teaming with the Internet Systems Consortium (ISC), maintainers of BIND and the F-root servers of DNS, to carry out a series of tasks. These tasks include: establish a long-term measurement infrastructure with supporting software tools to measure and understand behavior of the root DNS system; study a series of research questions on DNS such as the effects of anycast for a given root and/or client, anomaly identification in DNS traffic; characterizing traffic reaching the root name servers; understanding spurious RFC 1918 (private address space) traffic; how to auto-identify one-way queries; the traffic effects of DNSSEC; DNS resolver behavior in the context of global DNS; and characterizing root server performance and connectivity. The sum of this work, and the associated outreach activities, are intended to go a long way in the community hardening and securing DNS over time.Intellectual Merit and Broader Impact: The intellectual merit of this proposal lies in how it addresses National and Homeland Security (NHS) related recommendations to develop a 'cyberspace network operations center (NOC)' as well as its long-term mission to provide data needed to support DNS research that has relevance to the real Internet and how it support economic prosperity and vibrant civil society (ECS). The proposed work has broad impact on all three national priority areas in the ITR solicitation: (1) It advances the integrity of the field of Internet research by providing real data from core Internet components that are otherwise not amenable to measurement or modeling. (2) A global economy dependent on the Internet is a global economy dependent on the Domain Name Service working properly and securely. Protecting oneself against vulnerabilities in the DNS infrastructure will reduce national as well as global risk. (3) The DNS-OARC will enhance national and international security by providing a collaborative knowledge environment in which to establish and refine mechanisms for emergency response, and developing new technology for prevention, attribution and remediation of malicious or otherwise misbehaving agents affecting the DNS.