Collaborative Research: CT-T: DoS Prevention in Shared Channels

合作研究：CT-T：共享通道中的 DoS 预防

• 批准号: 0524269
• 负责人: Sanjeev Khanna
• 金额: $ 32.26万
• 依托单位: University of Pennsylvania
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-08-15 至 2010-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0524269&HistoricalAwards=false
• 关键词: Collaborative; Research; CT; DoS; Prevention

Proposal Number: 0524269Title: DoS Prevention in Shared ChannelsPI: Carl GunterMethods for analyzing and preventing Denial of Service (DoS) threats are of fundamental value for designing robust Internet protocols. Much work has been done to develop pragmatic solutions to protocol-specific DoS threats, but there is a lack of realistic theoretical models for studying DoS and of broad paradigms for designing DoS-resilient protocols. This project develops theoretical models based on a "shared channel model" which describes how adversaries and valid senders share the network bandwidth of attack targets. It exploits this model to design counter-measures based on a paradigm in which asymmetries in protocol workloads that are exploited by adversaries are systematically converted to the advantage of trusted parties. Specific project goals include developing (1) general techniques for obtaining DoS-resilience that can be used to adapt existing protocols or create new ones; (2) ways to automate DoS analysis of protocols to reduce the effort required to confirm practical availability properties theoretically and find unexpected attacks before protocols are deployed; and (3) a unified model of integrity, confidentiality, and availability based on both existing algebraic techniques and new probabilistic techniques.

提案编号：0524269标题：共享通道中的 DoS 预防 PI：Carl Gunter 分析和预防拒绝服务 (DoS) 威胁的方法对于设计强大的 Internet 协议具有根本价值。为了开发针对特定协议的 DoS 威胁的实用解决方案，我们已经做了很多工作，但缺乏用于研究 DoS 的现实理论模型以及用于设计 DoS 弹性协议的广泛范式。该项目开发了基于“共享通道模型”的理论模型，该模型描述了对手和有效发送者如何共享攻击目标的网络带宽。它利用该模型来设计基于范式的对策，在该范式中，对手利用的协议工作负载的不对称性被系统地转化为受信任方的优势。具体的项目目标包括开发 (1) 获得 DoS 弹性的通用技术，可用于调整现有协议或创建新协议； (2) 对协议进行自动化 DoS 分析的方法，以减少在理论上确认实际可用性属性并在部署协议之前发现意外攻击所需的工作量； (3)基于现有代数技术和新概率技术的完整性、机密性和可用性的统一模型。