CAREER: Probabilistic Evaluation of Computer Security based on Experimental Data

职业：基于实验数据的计算机安全概率评估

• 批准号: 0237493
• 负责人: Michel Cukier
• 金额: $ 40万
• 依托单位: University of Maryland, College Park
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2003
• 资助国家: 美国
• 起止时间: 2003-09-01 至 2008-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0237493&HistoricalAwards=false
• 关键词: CAREER; Probabilistic; Evaluation; Computer; Security

The goal of this research project is to evaluate the security of a computer network based on experi-mental data (i.e., vulnerability and attacker data collections). Data on vulnerabilities are collected and analyzed through the use of existing tools and new tools to be developed as part of this project. Data on attackers are collected using networks of computers where the user/attacker behavior is monitored. A new formalism is being developed for describing privilege gains due to the observed vulnerabilities. State machines are used to describe the attacker behavior. A new probabilistic framework is being developed to evaluate the security of a computer network based on experimental data. More specifically, for various computer networks, the parameters relevant to security issues need to be defined. The value of these parameters is then estimated through the data collected on these systems. The proposed probabilistic framework is then used to estimate the parameters values for a given computer network based on the parameter values obtained on other networks. The pa-rameter values are then used to evaluate the overall security of the computer network.This research project proposes a new approach for evaluating the security of a computer network based on experimental data. The results obtained from this project will allow security practitioners to quantify the security of a computer network. Moreover, this research includes the development of different tools and large data collections on vulnerabilities and attackers. The PI will develop course materials and tutorials and make available, through web-based access, the course materials. A web site (http://www.enre.umd.edu/faculty/cukier.htm) will be maintained at the University of Maryland where further information can be obtained. The results, tools and collected data will be made avail-able to the security community.

这个研究项目的目标是基于实验数据(即漏洞和攻击者数据收集)来评估计算机网络的安全性。通过使用现有工具和将作为该项目一部分开发的新工具来收集和分析有关漏洞的数据。使用监视用户/攻击者行为的计算机网络收集有关攻击者的数据。正在开发一种新的形式主义来描述由于观察到的漏洞而获得的特权。状态机用于描述攻击者的行为。正在开发一种新的概率框架，以基于实验数据来评估计算机网络的安全性。更具体地说，对于各种计算机网络，需要定义与安全问题相关的参数。然后通过在这些系统上收集的数据来估计这些参数的值。然后，基于在其他网络上获得的参数值，使用所提出的概率框架来估计给定计算机网络的参数值。本研究提出了一种基于实验数据的计算机网络安全评估方法。从这个项目中获得的结果将使安全从业者能够量化计算机网络的安全性。此外，这项研究还包括开发不同的工具和收集有关漏洞和攻击者的大量数据。国际和平研究所将编写课程材料和教程，并通过基于网络的途径提供课程材料。马里兰大学将维护一个网站(http://www.enre.umd.edu/faculty/cukier.htm))，在那里可以获得更多信息。结果、工具和收集的数据将可供安全界使用。