Collaborative Research: Cybertrust Center for Internet Epidemiology and Defenses

合作研究：网络流行病学和防御网络信任中心

• 批准号: 0433668
• 负责人: Stefan Savage
• 金额: $ 310万
• 依托单位: University of California-San Diego
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2004
• 资助国家: 美国
• 起止时间: 2004-10-01 至 2012-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0433668&HistoricalAwards=false
• 关键词: Collaborative; Research; Cybertrust; Center; Internet

Collaborative Research: Cybertrust Center for Internet Epidemiology and DefensesStefan Savage, University of California - San DiegoVern Paxson, International Computer Science InstituteAward 0433668AbstractThe combination of widespread software homogeneity and the Internet's unrestricted communication model creates an ideal climate for infectious, self-propagating pathogens - "worms" and "viruses" - with each new generation of outbreaks demonstrating increasing speed, virulence, and sophistication. The Center for Internet Epidemiology and Defenses aims to address twin fundamental needs: to better understand the behavior and limitations of Internet epidemics, and to develop systems that can automatically defend against new outbreaks in real-time.Understanding the scope and emergent behavior of Internet-scale worms seen in the wild constitutes a new science termed "Internet epidemiology". To gain visibility into pathogens propagating across the global Internet, the Center is pursuing the construction and operation of a distributed "network telescope" of unprecedented scale. The telescope in turn feeds a "honeyfarm" collection of vulnerable "honeypot" servers whose infection serves to indicate the presence of an Internet-scale worm.To then fight worms once detected, the Center works on developing mechanisms for deriving "signatures" of a worm's activity and disseminating these to worm suppression devices deployed throughout the global network.Finally, the Center strives to ground its research in the potentially thorny, but highly relevant, "real-world" issues of informing the development of legal frameworks in terms of the appropriate use of anti-worm technologies and their applications for providing forensic evidence; and enabling the development of actuarial models for quantifying exposure to aggregate risk and liability from Internet epidemics, critical for supporting the emerging cyber-insurance industry.

合作研究:广泛的软件同质性和互联网不受限制的通信模式相结合，为传染性、自我繁殖的病原体——“蠕虫”和“病毒”——创造了理想的环境，每一代新的爆发都显示出越来越快的速度、毒性和复杂性。互联网流行病学和防御中心旨在解决两个基本需求：更好地了解互联网流行病的行为和局限性，并开发能够实时自动防御新爆发的系统。了解互联网蠕虫在野外的范围和突发行为构成了一门被称为“互联网流行病学”的新科学。为了了解全球互联网传播的病原体，中心正在建设和运营一个规模空前的分布式“网络望远镜”。反过来，该望远镜为一个“蜜罐”服务器的“蜜罐”服务器集合提供信息，这些服务器的感染表明存在互联网规模的蠕虫。为了在检测到蠕虫后与之对抗，该中心致力于开发获取蠕虫活动“特征”的机制，并将这些特征传播给部署在全球网络中的蠕虫抑制设备。最后，该中心努力将其研究立足于可能棘手但高度相关的“现实世界”问题，即在适当使用反蠕虫技术及其用于提供法医证据的应用方面，为法律框架的发展提供信息；并能够开发精算模型，以量化互联网流行带来的总风险和责任，这对支持新兴的网络保险业至关重要。