---

Statement of Work (2008-2011)

In this project, we are applying a decade of experience in Internet topology measurement, analysis, modeling, and visualization capabilities to DHS' immediate cybersecurity needs to understand and protect essential U.S. information infrastructure.

The ultimate deliverables are periodic updates for router-level and AS-level Internet topologies integrated into the dual-layer router+AS-level topologies, and richly annotated with AS business relationships, geographic, latency, etc., attributes. To achieve this main task, the project will also deliver a new Internet topology data acquisition infrastructure and Internet topology data processing, analysis, annotation, and generations software.

Tasks and deliverables for the entire effort are separated into three phases:

Phase I: Applied Research (March 2008 - September 2009)

Task Number	Task Description
Task 1	Establish ongoing measurements of IPv4 topology using Archipelago measurement infrastructure. Complete initial deployment and debugging of Archipelago monitors and software. Start an ongoing IPv4 topology data collection. Continue to expand the Archipelago measurement infrastructure.
Task 2	Build a router-level graph of the Internet. Evaluate existing Ip-to-router resolution techniques. Select the best tool and collect data for aliases resolution. Derive a router-level graph from Ark data and aliases data.
Task 3	Build a dual AS-router level graph of the Internet. Derive an AS-level graph of the Internet from Ark data and BGP data. Develop methodology of merging the router-level and AS-level graphs into a dual topology graph of the Internet. Produce an experimental dual graph of the Internet topology. Validate the resulting graph vs. other internationally recognized sources of Internet topology data. Release software for calculation and comprehensive analysis of topology characteristics.

Phase II: Development (October 2009 - September 2010)

Task Number	Task Description
Task 4	Continue to improve the Archipelago measurements. Deploy 15 additional monitors. Prototype IPv6 topology measurements.
Task 5	Develop software for automated merging of router-level and AS-level graphs into a dual topology. Develop software for automated construction of router-level topology graphs. Update software for automated constrution of AS-level graphs. Develop software for building dual AS-router level topology graphs.
Task 6	Develop software for annotating dual graphs of the Internet. Provide automated annotation of AS-graphs with AS types and business relationships. Compare existing geolocation tools. Develop software for adding geolocation annotations to dual graphs. (optional) Develop software for adding latencies annotations to dual graph.
Task 7	Develop visualization methods for annotated dual AS-router Internet topology.

Phase III: Deployment (October 2010 - March 2011)

Task Number	Task Description
Task 8	Continue to improve the Archipelago measurements. Implement recommendations for improving Internet topology measurement learned during Phase I and II of the project. Deploy 10 additional monitors.
Task 9	Advise sponsors regarding use of data to support understanding of critical infrastructure for national security needs. Enrich our AS-ranking suite using all available measurement data and annotations. Validate our automated annotated dual graphs vs. other topology sources. Implement topology generator using annotated dual graphs methodology. Integrate telco hotel datasets into out data.

Deliverables

#	Associated Task	Deliverable Description	Type	Due date	Status
1	Task 1	Row IPv4 topology data collected on Ark platform	data	Jul 2008	Done
2	Task 2	Recommendations for best IP aliases resolution techniques	report	Oct 2008	Done
3	Task 2	Data for IP-to-router resolution	data	Dec 2008	Done
4	Task 3	Ark-based router-level graph	data	Jan 2009	Done (requires password)
5	Task 3	Ark-based AS-level graph	data	Jan 2009	Done
6	Task 3	Ark-based dual AS-router topologies	data	Jun 2009	Done
7	Task 3	Caveats and recommendations regarding Ark-based topology measurements	report	Sep 2009	Done
8	Task 3	Comprehensive software suite for topology characteristics	software	Dec 2009	Done
9	Task 4	Improve Ark-based topology data	data	Nov 2009	Done
10	Task 5	Regular updates of router-level graphs	data	Jan 2010	Done
11	Task 5	Regular updates of annotated AS-level graphs	data	Jan 2010	Done
12	Task 5	Software for automated merging of router-level and AS-level topologies	software	Mar 2010	Done
13	Task 5	Regular updates of dual Internet topologies	data	May 2010	Done
14	Task 6	Recommendations for best geolocation tools	report	Dec 2010	Done
15	Task 6	Annotated dual AS-router graphs	data	Oct 2010	Done
16	Task 6	Preliminary IPv6 topology data	data	Sep 2010	Done
17	Task 7	Visualization of annotated dual AS-router graphs	report	Sep 2010	Done
18	Task 8	Improved Internet topology data	data	Nov 2010	Done
19	Task 9	Generator for annotated dual Internet topologies at the AS-level and router-level	software	Jan 2011	Done
20	Task 9	Ark/skitter/DIMES topology comparisons at different levels of granularity	report	Mar 2011
21	Task 9	AS-ranking++	software	Mar 2011	Done
22	Task 9	Recommendations for the next generation of Internet topology measurement platforms	report	Mar 2011	Done

Related Links

• CAIDA's security-related papers