EIN: Collaborative Research:Cyber Defense Technology Experimental Research Network

该建议创建了一个试验性基础设施网络，以支持用于网络防御的下一代信息安全技术的开发和示范。这个网络防御技术实验研究网络(Deter Network)将提供必要的基础设施--网络、工具、方法和支持流程--以支持新兴安全研究和先进开发技术的国家规模实验。威慑网络的设计和运作将确保政府实体及其赞助的研究人员在广泛和多样化的社区中直接参与。早期活动和交付成果将描述使用实验设施的政策、程序和用户指南。这项工作将促进针对已建立的攻击行为基线进行科学实验和验证，并允许采用涉及破坏网络基础设施的实验方法。威慑网络将促进和促进这一重要领域的扩大研究和商业化努力。智力优势：该提案将为试验台网络开发体系结构，这些体系结构在较小的规模上代表互联网本身。它将利用位于伯克利的国际计算机科学研究所的ACIR在流量生成方面的工作，用于威慑网络。这两者的发展本身就是一个重大的研究挑战。在威慑网络的版本上，研究人员将通过实验、仿真和分析解决方案相结合的方式，研究针对分布式拒绝服务、蠕虫防御和其他网络攻击的网络安全解决方案。其目的是将分析方法与在具有足够规模和复杂性的网络上进行的实验相结合，以便能够对解决方案有信心，并通过其设备将解决方案传递给参与试验台的工业合作伙伴。更广泛的影响：这项提议预计将成为关键的构建块，使网络安全最初针对分布式拒绝服务攻击，然后是蠕虫攻击，但总体上是所有入侵。试验床网络将被整合到伯克利分校、南加州大学和加州大学戴维斯分校、普渡大学和宾夕法尼亚州立大学的合作机构的课程工作中。

This proposal creates an experimental infrastructure network to support the development and demonstration of next-generation information security technologies for cyber defense. This cyber Defense Technology Experimental Research Network (DETER Network) will provide the necessary infrastructure -- networks, tools, methodologies and supporting process -- to support national-scale experimentation on emerging security research and advanced development technologies. The DETER network will be designed and operated to ensure direct participation from government entities and their sponsored researchers in a wide and varied community. Early activities and deliverables will describe policies procedures for use of the experimental facility along with a users guide. The work will facilitate scientific experimentation and validation against established baselines of attack behavior and allow experimental approaches that involve breaking the network infrastructure. The DETER network will promote and catalyze expanded research and commercialization efforts in this vital area. Intellectual Merit: The proposal will develop architectures for test bed networks that are representative of the Internet itself at a somewhat smaller scale. It will leverage work from ACIR at the International Computer Science Institute, Berkeley on traffic generation for use in the DETER network. The development of both of these is itself a significant research challenge. On versions of the DETER network the researcher will study cyber security solutions to Distributed Denial of Service, Worm Defense and other network attacks through a combination of experiments, emulation, and analytical solutions. The aim is to integrate analytic methods with experiments on networks of adequate scale and complexity so as to be able to have confidence in solutions and transfer them to industrial partners participating in the test bed through their equipment. Broader impact: This proposal is expected to be the key building block for bringing network security initially against Distributed Denial of Service and then Worm attacks but in general all intrusions. The testbed network will be integrated into course work at both the upper division and graduate level Berkeley, USC and at partner institutions at UC Davis, Purdue, and Penn State.