CERT Network Service Provider and Infrastructure Initiative

CERT 网络服务提供商和基础设施计划

• 批准号: 9522315
• 负责人: Richard Pethia
• 金额: $ 204.47万
• 依托单位: Department of Air Force Hanscom Air Force Base Contracts Admin.
• 依托单位国家: 美国
• 项目类别: Interagency Agreement
• 财政年份: 1995
• 资助国家: 美国
• 起止时间: 1995-07-01 至 1998-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=9522315&HistoricalAwards=false
• 关键词: CERT; Network; Service; Provider; Infrastructure

NCR-95223 15 PI: Richard Pethia In response to computer security threats, the Advanced Research Projects Agency (ARPA) has established a Computer Emergency Response Team (CERT) to support users of the Internet. The Internet CERT coordination center is located at Carnegie Mellon University's Software Engineering Institute and has been active since November 18, 1988. CERT is chartered to work with the Internet community in detecting and resolving computer security incidents. Since its inception, CERT has responded to continuous stream of security incidents. The incident rate and impact on Internet sites has grown steadily as the Internet user population has grown. As the incident rate has grown, so has the sophistication of the intruders. Where intruders once focused on exploitation of weak passwords and widely known vulnerabilities, they have now progressed to examining source files for new security flaws, exploiting protocol flaws, and using tool kits to automate their attacks and increase their impact. CERT is expanding its program to increase its emphasis on incident prevention through a combination of technology improvement, security awareness and training, and security assessment activities. This expanded program includes two areas where CERT can provide special help that will facilitate the orderly, secure progression to the next stage in the Internet evolution: 1. Collaboration with router manufacturers 2. Collaboration with network service Providers

NCR-95223 15 PI：Richard Pethia 为了应对计算机安全威胁，美国高级研究计划局（ARPA）成立了一个计算机紧急响应小组（CERT），以支持互联网用户。Internet CERT协调中心位于卡内基梅隆大学的软件工程研究所，自1988年11月18日以来一直活跃。CERT被特许与互联网社区合作，检测和解决计算机安全事件。 自成立以来，CERT一直在应对不断发生的安全事件。随着互联网用户人数的增加，互联网网站的事件发生率和影响稳步上升。随着事件发生率的增加，入侵者的复杂程度也在增加。入侵者曾经专注于利用弱密码和众所周知的漏洞，现在他们已经发展到检查源文件中的新安全缺陷，利用协议缺陷，并使用工具包自动化攻击并增加其影响。 CERT正在扩大其计划，通过技术改进、安全意识和培训以及安全评估活动的结合，增加对事件预防的重视。这个扩展的计划包括两个领域，CERT可以提供特殊的帮助，以促进有序，安全地进入互联网发展的下一阶段： 1.与路由器制造商合作 2.与网络服务提供商合作