CT-T: Collaborative Research: Protecting TCP Congestion Control: Tools for Design, Analysis, and Emulation

CT-T：协作研究：保护 TCP 拥塞控制：设计、分析和仿真工具

• 批准号: 0524202
• 负责人: George Kesidis
• 金额: --
• 依托单位: Pennsylvania State Univ University Park
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-08-15 至 2010-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0524202&HistoricalAwards=false
• 关键词: CT; Collaborative; Research; Protecting; TCP

Proposal Number: 0524402Title: Protecting TCP Congestion Control: Tools for Design, Analysis and EmulationPI: George KesidisThe increasing volume of non-conforming and malicious traffic flows poses a serious challenge to the stability of the Internet. Such traffic flows could significantly throttle the data rates sustainable by TCP flows, and could affect millions of users who rely on the Internet for their daily business. The following three types of misbehaving flows: unresponsive TCP sessions, low-rate TCP-targeted attacks, and randomly scanning TCP worms, can be easy to launch and are enormously damaging.This research takes an ambitious step in systematically developing: (i) dynamic router-based quarantine schemes to penalize unresponsive TCP flows; (ii) defense strategies for low-rate TCP-targeted attacks; (iii) router-based designs to effectively control indiscriminate TCP worms; and (iv) tools and methodologies for the evaluation of the proposed schemes, specifically using the DETER/Emulab emulation platform. The research will enable in-depth characterization of the misbehaving flows and the design of effective solutions for minimizing the vulnerability of the Internet to such flows.This work will have an enormous practical impact, will foster new research directions towards a trustworthy Internet, will accelerate security research by streamlining the experimental process, and will train security students in both theory and hands-on experimentation.

提案编号：0524402 标题：保护 TCP 拥塞控制：设计、分析和仿真工具 PI：George Kesidis 不断增加的不合格和恶意流量对互联网的稳定性构成了严重挑战。此类流量可能会严重限制 TCP 流可持续的数据速率，并可能影响数百万依赖互联网进行日常业务的用户。以下三种类型的不当行为流：无响应的 TCP 会话、低速率 TCP 目标攻击和随机扫描 TCP 蠕虫，很容易启动，并且具有巨大的破坏性。本研究在系统开发方面迈出了雄心勃勃的一步：（i）动态基于路由器的隔离方案，用于惩罚无响应的 TCP 流； (ii) 针对低速率 TCP 目标攻击的防御策略； (iii) 基于路由器的设计，有效控制肆意的 TCP 蠕虫； (iv) 用于评估拟议方案的工具和方法，特别是使用 DETER/Emulab 仿真平台。 这项研究将能够深入描述行为不当的流量，并设计有效的解决方案，以最大限度地减少互联网对此类流量的脆弱性。这项工作将产生巨大的实际影响，将培育新的研究方向，迈向可信赖的互联网，将加速通过简化实验过程来开展安全研究，并将培训安全学生的理论和实践实验。