CT-ISG: PacketSpread: Practical Network Capabilities

CT-ISG：PacketSpread：实用网络功能

• 批准号: 0714277
• 负责人: Angelos Keromytis
• 金额: $ 28万
• 依托单位: Columbia University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-09-01 至 2011-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0714277&HistoricalAwards=false
• 关键词: CT; ISG; PacketSpread; Practical; Network

Proposal 0714277CT-ISG: PacketSpread; Practical Network CapabilitiesAngelos KeromytisColumbia UniversityNetwork denial of service attacks occur with increasing frequency anddevastating economic and psychological effects for the targeted sitesand their users. Addressing the problem has proven difficult, primarilydue to deployment and complexity concerns about previously proposedmechanisms. In particular, receiver-controlled capabilities are anelegant way for preventing communication interference, but aredifficult to deploy in practice and are susceptible to control-channelattacks.This project is investigating a new communication paradigm, namedPacketSpread, which makes feasible the use of capability-like mechanismson the current Internet, without requiring architectural modificationsto networks or hosts. The high-level hypothesis of the research is thatpractical network capability schemes can be constructed through theuse of end-point traffic-redirection mechanisms that use aspread-spectrum-like communication paradigm enabled by an overlaynetwork. To test this hypothesis, the project is prototyping andexperimentally validating the resistance of such a scheme againstattacks launched by realistic adversaries, while minimizing theimpact of the approach to end-to-end communication latency andthroughput.The results of this research will enable a better understanding hownetwork-capability schemes can be deployed and used to provide robustand secure communications under both normal operation and in times ofcrisis. Improvements in the security and reliability of large-scalesystems on which society, business, government, and individuals dependon will have a positive impact on society.

提案 0714277CT-ISG：PacketSpread；实用网络功能Angelos Keromytis 哥伦比亚大学网络拒绝服务攻击发生的频率越来越高，并对目标站点及其用户造成毁灭性的经济和心理影响。事实证明，解决这个问题很困难，主要是由于对先前提出的机制的部署和复杂性的担忧。特别是，接收器控制的功能是防止通信干扰的一种优雅方式，但在实践中很难部署，并且容易受到控制信道攻击。该项目正在研究一种新的通信范例，名为 PacketSpread，它使得在网络上使用类似功能的机制变得可行。当前的互联网，无需对网络或主机进行架构修改。该研究的高级假设是，可以通过使用端点流量重定向机制来构建实用的网络能力方案，该机制使用由覆盖网络启用的类扩频通信范例。为了测试这一假设，该项目正在原型设计并通过实验验证这种方案对现实对手发起的攻击的抵抗力，同时最大限度地减少该方法对端到端通信延迟和吞吐量的影响。这项研究的结果将有助于更好地理解网络如何- 可以部署和使用能力方案，以在正常操作和危机时期提供强大且安全的通信。 社会、企业、政府和个人所依赖的大型系统的安全性和可靠性的提高将对社会产生积极影响。