Measuring the Security of Internet Infrastructure

垃圾邮件、网络钓鱼和其他网络犯罪的激增表明，仅仅让网站所有者对流量进行加密是不够的。如果您访问了错误的网站，您可能会被误导或欺骗；或者您访问的网站名称正确，但IP地址错误；或者如果你访问一个IP地址正确的网站，但托管在世界的另一部分。因此，很明显，我们必须在基础设施级别保护互联网，这意味着保护命名（DNS）和路由（BGP）机制。业界即将部署DNSSEC，各种ad-hoc机制正在被用来保护BGP。然而，这些部署将需要数年时间，而且许多公司一开始会犯错误。很明显，NPL需要监控这个过程，以衡量哪些是有效的，哪些是无效的；对落后的经济部门施加压力；帮助改进身份验证和监控工具；并在向更安全的基础设施发展的过程中提供权威的声音。我们的研究计划将通过建立监测框架来帮助国家物理实验室建立这种能力。我们还计划开发一个BGP反射器系统来处理带外的全局路由表增长，以及一个用于互联网交换（如LINX和AMSIX）使用的路由服务器的身份验证和验证系统，以提高对等点的弹性，并防止多种可能的攻击类型。我们认为，这具有全球重要性，而且随着美国商务部和IETF等机构陷入政治角力，英国/欧洲的标准领导者很有可能发展成为全球领导者。

The rising tide of spam, phishing and other online crime has shown that it's not enough to leave it to website owners to encrypt traffic. You may be misled or defrauded if you visit the wrong website; or if you visit a website with the right name but at the wrong IP address; or if you visit a site at the right IP address, but hosted in another part of the world. It has thus become clear that we have to protect the Internet at the infrastructure level, which means protecting the naming (DNS) and routing (BGP) mechanisms. The industry is about to deploy DNSSEC, and various ad-hoc mechanisms are being used to protect BGP.However these deployments will take years, and many firms will initially get it wrong. There is a clear case for NPL to monitor the process in order to measure what's working and what isn't; to create pressure on sectors of the economy that lag behind; to help improve both authentication and monitoring tools; and to provide an authoritative voice on the move to a more secure infrastructure. Our research programme will help create this capability at NPL by establishing the monitoring framework. We also plan to develop a BGP reflector system to deal with global routing table growth out of band , along with an authentication and validation system for the route servers used by internet exchanges such as LINX and AMSIX to improve peering point resilience and to prevent a number of possible types of attack.We believe that this is of global importance, and that as players such as the US Department of Commerce and the IETF have got bogged down in political wrangling, a UK / European standards lead has a good chance of developing into global leadership.