EIN: Collaborative Research:Cyber Defense Technology Experimental Research Network

该提案创建了一个实验性基础设施网络，以支持下一代网络防御信息安全技术的开发和演示。这个网络防御技术实验研究网络将提供必要的基础设施-网络、工具、方法和支助进程-以支持国家规模的新兴安全研究和先进开发技术实验。DETER网络的设计和运作将确保政府实体及其赞助的研究人员在广泛而多样的社区中直接参与。 早期活动和交付物将描述使用实验设施的政策和程序，并附有用户指南沿着。这项工作将促进科学实验和验证，以建立攻击行为的基线，并允许涉及破坏网络基础设施的实验方法。 DETER网络将促进和催化在这一重要领域扩大研究和商业化努力。智力优势：该提案将开发测试床网络的体系结构，这些网络在较小的规模上代表互联网本身。它将利用伯克利国际计算机科学研究所ACIR在DETER网络中使用的流量生成方面的工作。 这两者的发展本身就是一个重大的研究挑战。在DETER网络的版本上，研究人员将通过实验、仿真和分析解决方案的结合，研究分布式拒绝服务、蠕虫防御和其他网络攻击的网络安全解决方案。其目的是将分析方法与足够规模和复杂性的网络实验相结合，以便能够对解决方案充满信心，并通过其设备将其转移到参与测试床的工业合作伙伴。更广泛的影响：该建议预计将成为最初针对分布式拒绝服务攻击和蠕虫攻击（但通常是所有入侵）的网络安全的关键构建块。该测试平台网络将被整合到伯克利分校、南加州大学以及加州大学戴维斯分校、普渡大学和宾夕法尼亚州立大学的合作机构的高级和研究生课程中。

This proposal creates an experimental infrastructure network to support the development and demonstration of next-generation information security technologies for cyber defense. This cyber Defense Technology Experimental Research Network (DETER Network) will provide the necessary infrastructure -- networks, tools, methodologies and supporting process -- to support national-scale experimentation on emerging security research and advanced development technologies. The DETER network will be designed and operated to ensure direct participation from government entities and their sponsored researchers in a wide and varied community. Early activities and deliverables will describe policies procedures for use of the experimental facility along with a users guide. The work will facilitate scientific experimentation and validation against established baselines of attack behavior and allow experimental approaches that involve breaking the network infrastructure. The DETER network will promote and catalyze expanded research and commercialization efforts in this vital area. Intellectual Merit: The proposal will develop architectures for test bed networks that are representative of the Internet itself at a somewhat smaller scale. It will leverage work from ACIR at the International Computer Science Institute, Berkeley on traffic generation for use in the DETER network. The development of both of these is itself a significant research challenge. On versions of the DETER network the researcher will study cyber security solutions to Distributed Denial of Service, Worm Defense and other network attacks through a combination of experiments, emulation, and analytical solutions. The aim is to integrate analytic methods with experiments on networks of adequate scale and complexity so as to be able to have confidence in solutions and transfer them to industrial partners participating in the test bed through their equipment. Broader impact: This proposal is expected to be the key building block for bringing network security initially against Distributed Denial of Service and then Worm attacks but in general all intrusions. The testbed network will be integrated into course work at both the upper division and graduate level Berkeley, USC and at partner institutions at UC Davis, Purdue, and Penn State.