CT-T: Collaborative Research: Protecting TCP Congestion Control: Tools for Design, Analysis, and Emulation

CT-T：协作研究：保护 TCP 拥塞控制：设计、分析和仿真工具

• 批准号: 0524202
• 负责人: George Kesidis
• 金额: --
• 依托单位: Pennsylvania State Univ University Park
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-08-15 至 2010-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0524202&HistoricalAwards=false
• 关键词: CT; Collaborative; Research; Protecting; TCP

Proposal Number: 0524402Title: Protecting TCP Congestion Control: Tools for Design, Analysis and EmulationPI: George KesidisThe increasing volume of non-conforming and malicious traffic flows poses a serious challenge to the stability of the Internet. Such traffic flows could significantly throttle the data rates sustainable by TCP flows, and could affect millions of users who rely on the Internet for their daily business. The following three types of misbehaving flows: unresponsive TCP sessions, low-rate TCP-targeted attacks, and randomly scanning TCP worms, can be easy to launch and are enormously damaging.This research takes an ambitious step in systematically developing: (i) dynamic router-based quarantine schemes to penalize unresponsive TCP flows; (ii) defense strategies for low-rate TCP-targeted attacks; (iii) router-based designs to effectively control indiscriminate TCP worms; and (iv) tools and methodologies for the evaluation of the proposed schemes, specifically using the DETER/Emulab emulation platform. The research will enable in-depth characterization of the misbehaving flows and the design of effective solutions for minimizing the vulnerability of the Internet to such flows.This work will have an enormous practical impact, will foster new research directions towards a trustworthy Internet, will accelerate security research by streamlining the experimental process, and will train security students in both theory and hands-on experimentation.

提案编号：0524402TITLE：保护TCP拥塞控制：设计，分析和仿真的工具：乔治·凯西迪斯（George Kesidis）的不合格和恶意交通流量的增加对互联网的稳定性构成了严重的挑战。此类流量流可以大大防止TCP流动可持续的数据速率，并可能影响数百万依靠Internet进行日常业务的用户。 The following three types of misbehaving flows: unresponsive TCP sessions, low-rate TCP-targeted attacks, and randomly scanning TCP worms, can be easy to launch and are enormously damaging.This research takes an ambitious step in systematically developing: (i) dynamic router-based quarantine schemes to penalize unresponsive TCP flows; （ii）低速TCP攻击的防御策略； （iii）基于路由器的设计，可有效控制不加选择的TCP蠕虫； （iv）用于评估所提出方案的工具和方法，专门使用Deter/Emulab仿真平台。 这项研究将实现不当行为流动的深入表征，并设计有效的解决方案，以最大程度地减少互联网对这种流动的脆弱性。这项工作将产生巨大的实践影响，将促进新的研究方向，指向可信赖的互联网，将通过简化实验学生和Handers Handers-hrands-horthe and-hons-ons-on-on-on-on-on-on-on-on-on-on-on-on-on-on-on-on-on nertimentions培养安全性研究。