An Open Infrastructure for Network Performance and Security Monitoring

用于网络性能和安全监控的开放基础设施

• 批准号: 0222846
• 负责人: Andrew Adams
• 金额: $ 65万
• 依托单位: Carnegie-Mellon University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2002
• 资助国家: 美国
• 起止时间: 2002-07-01 至 2005-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0222846&HistoricalAwards=false
• 关键词: Open; Infrastructure; Network; Performance; Security

The project plans to solve two important network problems facing distributed computation and Grids. The first problem is to provide a sufficiently flexible and robust framework for authentication and authorization, and the second problem is to provide secure mechanisms to allow researchers to upload new or enhanced measurement tools in a secure and trustworthy fashion. Building on the National Internet Measurement Infrastructure (NIMI), the project plans to evolve NIMI to a truly large scale implementation. Work involves migrating messaging, authentication and authorization to commonly used components, and mitigating some of the security problems associated with uploading measurement tools by building fine-grained delegation support and different levels of security. These structures can be used for various forms of distributed passive monitoring and security monitoring such as intrusion detection systems.The NIMI architecture will be extended to support open large-scale grid technologies. The overall vision is to encourage researchers, especially grid-proejcts, to build clients which will interact with the NIMI infrastructure. The infrastructure can then be used for secure, flexible command and control mechanisms, and also be sued for distributed passive monitoring.

该项目计划解决分布式计算和网格面临的两个重要网络问题。第一个问题是为认证和授权提供一个足够灵活和健壮的框架，第二个问题是提供安全机制，允许研究人员以安全可靠的方式上传新的或增强的测量工具。该项目以国家互联网测量基础设施（NIMI）为基础，计划将NIMI发展为真正的大规模实施。工作包括将消息传递、身份验证和授权迁移到常用组件，并通过构建细粒度委托支持和不同级别的安全性来减轻与上传度量工具相关的一些安全性问题。这些结构可用于各种形式的分布式被动监控和安全监控，如入侵检测系统。NIMI架构将被扩展以支持开放的大规模网格技术。总体愿景是鼓励研究人员，特别是电网项目，建立将与NIMI基础设施交互的客户端。然后，该基础设施可用于安全、灵活的指挥和控制机制，也可用于分布式被动监控。