CT-T: A Laboratory Workbench for Security Research

NSF 0524096CT-T：安全研究的实验室工作台jay lepreau本研究开发了直接改进安全相关软件系统研究的新技术和技术。研究可信软件和恶意软件（尤其是运行在计算机网络上的软件）的主要障碍是提供真实但受控的环境。环境不仅必须提供强大的遏制保证，而且必须提供与外部世界的强大连接，这既是为了现实，也是为了能够对被测系统进行分析和控制。这项研究开发和部署了新技术，以三种“及时”的方式使这些环境公开可用。首先是允许分布式系统暂停、检查点以及向前和向后移动的技术。这一研究在网络系统的实时间和虚拟时间混合方面取得了进展。第二种方式是实验工作流程的工作台，允许人们在实验过程中向前和向后移动。这在许多领域产生了进步，包括分布式系统控制、科学工作流管理、大规模数据存储、数据分析和可视化。第三个“及时”的结果是将该基础设施作为流行的基于web的“Emulab”测试平台软件的一部分进行定期部署。项目的工具持续地部署在在线网络测试平台上，并交付给研究、教育和安全社区使用和扩展。

NSF 0524096CT-T: A Laboratory Workbench for Security ResearchJay LepreauThis research develops new techniques and technologies that directly improve the study of security-related software systems. A primary barrier to studying both trustworthy and malicious software, especially software that runs on networks of computers, is providing realistic but controlled environments. The environments must provide not only strong containment guarantees, but also strong connections to the outside world, both for realism and to enable analysis and control of the systems under test.This research develops and deploys new technologies to make such environments publicly available, in three "timely" ways. The first is technology that allows distributed systems to be paused, checkpointed, and moved forward and backward in time. This research is leading to advancements in mixing real and virtual time in networked systems. The second way is a workbench for experiment workflows, allowing people to move forward and backward through the experimentation process. This is yielding advances in many areas including distributed system control, scientific workflow management, large-scale data storage, data analysis, and visualization. The third "timely" result is the regular deployment of this infrastructure as part of the popular Web-based "Emulab" testbed software. The project's tools are continuously deployed in online network testbeds, and delivered to the research, education, and security community for use and extension.