SBIR Phase I: An Integrated Solution to Internet Route Hijacking

该小企业创新研究（SBIR）第一阶段项目旨在开发一种有效的互联网路由劫持检测、分析和缓解解决方案。互联网路由系统是全球互联网基础设施的关键组成部分，因为所有其他互联网功能都依赖于路由系统进行端到端数据传输。不幸的是，今天的路由系统缺乏有效的安全保护，因此恶意攻击者可以宣布属于其他人的网络地址，并有效地将数据流量转移到攻击者选择的位置。这种路由劫持攻击可能导致拒绝服务，使网站无法访问。如果这种攻击的目标是在线商务网站，那么24小时拒绝服务攻击的经济损失可能是巨大的。路由劫持攻击还可能引发其他各种更具破坏性的攻击，例如未经授权的流量捕获、身份盗窃、被盗密码和信用卡信息、金融欺诈以及其他犯罪活动。基于最前沿的研究成果，该公司提出了开发一个集成的解决方案，以路由劫持。该解决方案包括威胁感知、早期检测和自动恢复。最近的一项调查显示，路由劫持是当今网络运营商最关心的问题之一。虽然在网络安全市场的广泛领域有多个参与者，但拟议的解决方案特别侧重于路由安全，该公司拥有领先的解决方案。 如果成功开发，该解决方案不仅可以检测，而且可以从劫持攻击中恢复。 如果部署，该公司有可能解决行业中的一个重大痛点。

This Small Business Innovation Research (SBIR) Phase I project proposes to develop an effective solution for Internet route hijack detection, analysis, and mitigation. The Internet routing system is a critical component in the global Internet infrastructure because all other Internet functions depend on the routing system for end-to-end data delivery. Unfortunately today's routing system lacks effective security protection, thus malicious attackers can announce network addresses belonging to others and effectively divert data traffic to locations of the attackers' choice. Such route hijack attacks can lead to denial of service that leaves web site unreachable. If the target of such an attack were online commerce web sites, the financial loss for a 24-hour denial of service attach could be significant. Route hijacking attacks can also open the door to a variety of other more devastating attacks, such as unauthorized traffic capture, identity theft, stolen passwords and credit card information, financial fraud, and other criminal activities. Based on cutting-edge research results from academe, the company proposes to develop an integrated solution to route hijacking. The solution consists of threat awareness, early detection, and automatic recovery. A recent survey showed that route hijacking is one of the top concerns among network operators today. Although there are multiple players in the broad area of network security market, the proposed solution focuses specifically on routing security where the company possess a leading-edge solution. If successfully developed, the solution not only can detect but also can recover from hijack attacks. If deployed, the company has the potential to address a significant pain point in the industry.