C RIM 3460 Introduction to Critical Infrastructure Protection Spring Chapter 6 Internet

Transcription

1 C RIM 3460 Introduction to Critical Infrastructure Protection Spring 2016 Chapter 6 Internet School of Criminology and Justice Studies University of Massachusetts Lowell

2 Historical Timeline The human organizations behind the Internet? Legislation leading to Commercialization Who governs the Internet, today? Invention ARPA - Advanced Research Projects Agency NSF National Science Foundation IETF Internet Engineering Task Force W3C World Wide Web Consortium ICANN - Internet Corporation for Assigned Names and Numbers created to sell blocks of names

3 The Internet is a network that runs TCP/IP A network of networks A generic term used in the 1970s in reference to the ARPANet network Internet is a network that links computer networks all over the world by satellite and telephone, connecting users with service networks such as and the World Wide Web. 1 1 Encarta World English Dictionary 1999 Microsoft Corporation

4 USSR launches Sputnik and USA responds with creation of ARPA = Advanced Research Projects Agency Licklider of MIT proposes Intergalactic Computer Network as head of ARPA s command and control program Joseph Carl Robnett "Lick" Licklider developed the idea of a universal network, spread his vision throughout the IPTO, and inspired his successors to realize his dream by creation of the ARPANET. (Robert) Taylor s Terminal Problem How to connect one terminal to 2 or more computers ARPA contracts BBN to build packet switched ARPANet

5

6 Back-of-Envelope Sketch: A Server (Sigma7) and a Switch (IMP) Back-of-Envelop Sketch: 4 Computers located in UCLA, SRI (Palo Alto), UCSB, Utah

7 Jon Postel starts list of users - eventually becomes DNS - for ARPA - he runs IANA for 30 years DNS (Domain Name Server); Telephone Book of Internet. DNS translates: into The RFC Process Steve Crocker of UCLA creates RFC = Request For Comment - major tool of Internet evolution

8 Cluster of Servers on East and West Coast

9 Vinton Cerf of Stanford and Robert Kahn of DARPA (Defense Acquisition Research Projects Agency) invent TCP for interoperability and reliability across a network of networks = the Internet protocol. First use of the term, Internet Bob Metcalf invents Ethernet for LANs = Local Area Networks = to become dominant LAN protocol DARPA requires use of TCP in ARPANet

10 Vinton Cerf, Jon Postel, Danny Cohen divide TCP into 2 parts: TCP and IP - thus TCP/IP is born ARPANet Internet exceeds 100 users Bellovin of UNC invents USENET news group network NSF creates CSNet for non-arpanet university use Jon Postel creates SMTP (Simple Mail Transport Protocol) thus standardizing

11 ARPANET at 1,000 users - research centers: Stanford/XPARC, USC/ISI, Triangle Park, MIT

12 Al Gore discovers the Internet NRC report chaired by Kleinrock suggests the commercialization of the Internet - attracts Gore s attention Tim Berners-Lee (CERN) invents the World Wide Web: HTML Hyper-linked documents

13 Congress gives NSF permission to commercialize the Internet (NSFNet) Number of users exceeds 1 million NSF creates InterNIC to support Internet AT&T contracted to maintain DNS structure NSF awards 5-year contract to Network Solutions to sell domain names for $50/year subscription Number users exceeds 2 million

14 Mosaic - First graphical browser Turned web into a visual web Made it easy to use Ran on low-cost PCs After spending $200M from NSF out-sources the Internet to 4 companies via Department of Commerce Clinton administration directs Secretary of Commerce to privatize the DNS to increase competition and International participation

15 Department of Commerce National Telecom and Information Admininistration (NTIA) produces Green Paper on governance of Internet and DNS in a private ownership world ICANN created to sell blocks of names Internet Assigned Numbers Authority (IANA) is responsible for coordination of DNS root and IP addressing/other resources mbersauthority.org/

16

17 Non-profit, LLC formed IT sector members as a forum for managing risks to IT infrastructure and corporations. Members participate in national and homeland security efforts to strengthen IT infrastructure through cyber information sharing and analysis Members help improve incident response via collaboration, analysis and coordination, which drives cybersecurity policy, incident response and information sharing Current officers and board members are with Cargill, Oracle, Intel, AT&T, BAE Systems and HP.

18 Figure 6-1 (in Text). Internet age versus classical industrial age

19 Figure 6-2 (in Text). AS500 network: the most-connected 500 autonomous systems in the global Internet

20 Figure 6-3 (in Text). Core autonomous systems of the Internet

21 Simulation Spread virus in AS500 Internet with vulnerability of 5%. Spread virus in AS500 Internet with vulnerability of 10%. Spread virus in AS2000 Internet with vulnerability of 5%. Spread virus in AS2000 Internet with vulnerability of 10%.

22 Simulations illustrates the relationship between Internet structure and node vulnerability under stress. Assume a virus starts spreading from a node chosen at random. What is the risk that it will spread to other nodes? AS500 with a 5% probability of spreading (vulnerability) produces a low-risk (exceedence and risk profile) AS500 with a 10% probability produces a modest risk due to the increase in vulnerability AS2000 (less resilient to cascades) with a 5% probability produces a higher risk than AS500 due to less resiliency AS2000 with a 10% probability produces a catastrophic risk network due to the increase in vulnerability

23 Figure 6-4 (in Text). DNS structure of the global Internet

24 Figure 6-5 (in Text). The ISO-OSI protocol stack.

25 Figure 6-6 (in Text). Governance of the Internet is mostly a collection of voluntary groups.

26 Figure 6-7 (in Text). Example of sending an via TCP/IP protocol

27 Internet = TCP/IP Any device that understands TCP/IP is on the Internet Internet s webgraph has a high spectral radius Vulnerable to the spread of viruses Logical DNS structure is a tree DNS is the telephone book Updated frequently Controls who is on the Internet Internet governance is voluntary; so far

28 What is Internet Security? Properties of Sand Piles; Internet SOC at the physical, virtual levels Cyber Exploits: Real or Hype? Vulnerabilities Consequences Black Swans Reality Check Einstein on Offense

29 Internet as Biology The Internet Ecosystem Predator-Prey Systems Limit cycles and extinction Gause s Law Paradox of Enrichment The Internet monoculture Policy Options Traditional Radical

30 Biology Internet DNA TCP/IP Alphabet Messenger RNA Internet Routing Cisco Router Mutation Innovation Unix > MacOS Extinction Creative Destruction DEC, CDC, Multics Co-evolution Co-evolution 3G : iphones Food Network Supply Chain ARM > Apple > ipad Predators Users, Hackers, e-commerce RussianBusinessNet Prey Hardware, Software Windows, MS Office

31 Vulnerabilities constantly change Some go up, some go down Malware Insiders Stolen laptop Denial of service (DOS) Financial fraud (phishing) Password sniffing Open wireless access

32 Regulation : Should the Internet be regulated? Will it kill it? What is legitimate regulation? Larry Lessig s 4 Codes: East Coast Code: Internet laws cannot oppose existing laws o Fraud, Theft, Pornography, subject to same rules West Coast Code: Rules of Internet operation driven by Internet culture o TCP/IP, WWW, media, other standards drive the culture Social Norms: Internet law/regulation follow social norms o Censorship, free speech, privacy, civil behavior Markets and Commerce: information supply and demand = classical economics

33