SaTC: CORE: Large: Collaborative: Investigating the Susceptibility of the Internet Topology to Country-level Connectivity Disruption and Manipulation

SaTC：核心：大型：协作：调查互联网拓扑对国家级连接中断和操纵的敏感性

• 批准号: 2202288
• 负责人: Alberto Dainotti
• 金额: $ 102.67万
• 依托单位: Georgia Tech Research Corporation
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2021
• 资助国家: 美国
• 起止时间: 2021-10-01 至 2022-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2202288&HistoricalAwards=false
• 关键词: SaTC; CORE; Large; Collaborative; Investigating

Malicious actors such as hackers, terrorists or nation-states can disrupt, intercept or manipulate the Internet traffic of entire countries or regions by targeting structural weaknesses of the Internet. Strategic physical locations exist in the Internet topology. Despite much recent interest and a large body of research on cyber-attack vectors and mechanisms, we lack rigorous tools to reason about how the Internet topology of a country or region exposes its critical communication infrastructure to compromise through targeted attacks. This project develops methodologies to identify potential topological weaknesses of the Internet infrastructure, especially from the perspective of an attacker, and to quantify the potential impact if attackers were to compromise these critical elements. The broader impacts of this project are substantial: understanding structural weaknesses in the Internet topology of countries or regions is of significant interest not just to the research and operational communities, but also to everyday Internet users and policy bodies. More generally, it will secure the critical Internet infrastructure on which our daily activities depend.This project is a two-phase project. In the first phase, the goal is identifying important components of the Internet topology of a country and region --- Autonomous Systems, Internet Exchange Points, colocation facilities, and physical cable systems that represent key locations of the Internet. The project will undertake a novel multi-layer mapping effort, developing measurement and analysis techniques to discover these components and the relationships between them. The second phase of the project utilizes the multi-layer map and develops methods to identify components that represent potential topological weaknesses, i.e., compromising a few such components would allow an attacker to disrupt, manipulate, or eavesdrop on a large fraction of Internet traffic of that country. The multi-layer view of the system will enable an assessment of weaknesses holistically as well as at specific layers, under various assumptions about the capabilities and knowledge of attackers. Geographic annotations will enable a consideration of risks related to the geographic distribution of critical components of the communication infrastructure.

黑客，恐怖分子或民族国家等恶意行为者可以通过针对互联网的结构弱点来破坏，拦截或操纵整个国家或地区的互联网交通。互联网拓扑中存在战略性物理位置。尽管最近对网络攻击媒介和机制进行了大量的兴趣以及大量研究，但我们缺乏严格的工具来推理一个国家或地区的互联网拓扑如何通过目标攻击来妥协其关键的沟通基础设施。该项目开发了识别互联网基础设施的潜在拓扑弱点的方法，尤其是从攻击者的角度来看，并量化攻击者妥协这些关键要素的潜在影响。该项目的更广泛影响是实质的：了解国家或地区的互联网拓扑结构弱点不仅对研究和运营社区引起了重大兴趣，而且对日常的互联网用户和政策机构也引起了人们的关注。更一般而言，它将确保我们的日常活动所依赖的关键互联网基础架构。该项目是一个两阶段的项目。在第一阶段，目标是确定一个国家和地区的互联网拓扑的重要组成部分 - 自主系统，互联网交换点，托管设施以及代表互联网关键位置的物理电缆系统。该项目将进行新的多层映射工作，开发测量和分析技术以发现这些组件及其之间的关系。该项目的第二阶段利用多层地图，并开发方法来识别代表潜在拓扑弱点的组件，即损害一些这样的组件将使攻击者可以破坏，操纵或窃听该国互联网交通的大部分。在对攻击者的能力和知识的各种假设下，系统的多层观点将能够整体上和特定层的弱点进行评估。地理注释将使您能够考虑与通信基础设施关键组成部分的地理分布相关的风险。

项目成果

Attack or Block? Repertoires of Digital Censorship in Autocracies

攻击还是格挡？

• DOI: 10.1080/19331681.2022.2037118
• 发表时间: 2023
• 期刊: Journal of Information Technology & Politics
• 影响因子: 2.6
• 作者: Kawerau, Lukas;Weidmann, Nils B.;Dainotti, Alberto
• 通讯作者: Dainotti, Alberto

Improving the Inference of Sibling Autonomous Systems

改进兄弟自治系统的推理

• 发表时间: 2023
• 期刊: Passive and Active Measurement Conference (PAM
• 作者: Chen, Z.;Bischof, Z.;Testart, C.;Dainotti, A.
• 通讯作者: Dainotti, A.

iGDB: connecting the physical and logical layers of the internet

iGDB：连接互联网的物理层和逻辑层

• DOI: 10.1145/3517745.3561443
• 发表时间: 2022
• 期刊: ACM Internet Measurement Conference (IMC
• 作者: Anderson, Scott;Salamatian, Loqman;Bischof, Zachary S.;Dainotti, Alberto;Barford, Paul
• 通讯作者: Barford, Paul

Identifying ASes of state-owned internet operators

• DOI: 10.1145/3487552.3487822
• 发表时间: 2021-11
• 期刊: Proceedings of the 21st ACM Internet Measurement Conference
• 作者: Esteban Carisimo;Alexander Gamero-Garrido;A. Snoeren;A. Dainotti

A multi-perspective view of Internet censorship in Myanmar

缅甸互联网审查制度的多视角

• DOI: 10.1145/3473604.3474562
• 发表时间: 2021
• 期刊: FOCI '21: Proceedings of the ACM SIGCOMM 2021 Workshop on Free and Open Communications on the Internet
• 作者: Padmanabhan, Ramakrishna;Filastò, Arturo;Xynou, Maria;Raman, Ram Sundara;Middleton, Kennedy;Zhang, Mingwei;Madory, Doug;Roberts, Molly;Dainotti, Alberto
• 通讯作者: Dainotti, Alberto