STI/ MAST: A Mobile Agent-based Security Tool for Administration and Training

STI/ MAST：基于移动代理的管理和培训安全工具

• 批准号: 0230927
• 负责人: Niranjan Suri
• 金额: $ 51万
• 依托单位: University of West Florida
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2002
• 资助国家: 美国
• 起止时间: 2002-10-01 至 2005-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0230927&HistoricalAwards=false
• 关键词: STI; MAST; Mobile; Agent; based

The growth and globalization of the Internet have made computer and network security a paramount challenge. In 1988, the Internet Worm caused much havoc and effectively shutdown the Internet. However, the systems that were affected were mostly at universities and other research centers. Today, circumstances are very different from 1988. Many businesses rely on networks of systems connected to the Internet. Network attacks result in downtime that cost companies significant time and money due to lost productivity and/or loss of data. Moreover, critical infrastructural systems are being connected to the Internet thereby raising the potential for disruption through network-based attacks. Unfortunately, this same characteristic attracts attackers who wish to make highly-visible statements. This project, will build a security tool that serves two purposes: (a) Help system administrators find vulnerabilities and possible attacks on systems and networks and (b) Teach students and novice administrators about security concerns. Administrators will be able to use the tool to check for known vulnerabilities on their systems, to check whether the latest security updates and patches have been installed, and to monitor their systems for different forms of attacks or break-ins. The tool can be used in a classroom, laboratory, or in the field to help students and novice administrators learn about the security domain, the latest known vulnerabilities, and how to fix them. The security tool will integrate and build upon two key technologies: mobile software agents and concept maps. The NOMADS mobile agent system will provide the agent framework and security kernels while the CMapTools software will be used as the application to build and maintain the knowledge base. The proposed security tool will integrate these technologies in an administrator console that will provide extreme flexibility, monitoring and control of the system through remote execution of mobile code. The security tool will consist of four components, the An administrator's console, the security kernel, the knowledge model and a set of security agents that will be provided and distributed with the tool. The Concept Map based knowledge model and the flexibility imbued by the use of mobile agents ensures that the proposed tool will be equally useful and effective in production, teaching and training environments. The MAST security tool, proposed in this work will be freely distributed for academic and non-profit use.

互联网的发展和全球化使计算机和网络安全成为一项重大挑战。 1988年，互联网蠕虫造成了巨大的破坏，并有效地关闭了互联网。然而，受影响的系统主要是在大学和其他研究中心。 今天的情况与1988年大不相同。许多企业依赖于连接到Internet的系统网络。网络攻击会导致停机，导致生产力损失和/或数据丢失，从而使公司花费大量时间和金钱。此外，关键的基础设施系统正在与因特网连接，从而增加了通过网络攻击造成破坏的可能性。不幸的是，同样的特征吸引了那些希望做出高度可见的声明的攻击者。 该项目将建立一个安全工具，用于两个目的：（a）帮助系统管理员发现系统和网络上的漏洞和可能的攻击，（B）向学生和新手管理员讲授安全问题。 管理员将能够使用该工具检查其系统上的已知漏洞，检查是否已安装最新的安全更新和补丁，并监控其系统是否存在不同形式的攻击或入侵。该工具可用于教室，实验室或现场，以帮助学生和新手管理员了解安全域，最新的已知漏洞，以及如何修复它们 该安全工具将集成并建立在两项关键技术之上：移动的软件代理和概念图。 NOMADS的移动的代理系统将提供代理框架和安全内核，而CMapTools软件将被用作应用程序，以建立和维护知识库。拟议的安全工具将把这些技术集成到管理员控制台中，通过远程执行移动的代码来提供极大的灵活性、监视和控制系统。 该安全工具将由四个部分组成，即管理员控制台、安全内核、知识模型和一组将与该工具一起提供和分发的安全代理。 概念图为基础的知识模型和灵活性充满了使用移动的代理，确保所提出的工具将同样有用和有效的生产，教学和培训环境。 MAST安全工具，在这项工作中提出将免费分发学术和非营利用途。