CT-ISG: Learning to Protect Computer Networks via Proactive Vulnerability Assessment

CT-ISG：学习通过主动漏洞评估保护计算机网络

• 批准号: 0524831
• 负责人: Thinh Nguyen
• 金额: $ 35.6万
• 依托单位: Oregon State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-09-01 至 2009-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0524831&HistoricalAwards=false
• 关键词: CT; ISG; Learning; Protect; Computer

This project applies artificial-intelligence (AI) techniques to proactive vulnerability assessment (VA) in computer networks. Current library-based approach to VA does not allow the exploitation of vulnerabilities outside the library of the known attack characteristics. This proposal takes the first step toward the next generation of proactive VA software by developing advanced AI techniques that learn to attack a computer network, and hence discover its vulnerabilities and weaknesses before these weaknesses are exploited. The initial work casts VA within the framework of reinforcement learning (RL) as this approach has demonstrated previous successes for other networking problems. RL researchers study algorithms for learning high reward strategies for one or more agents based on reward signals received while interacting with an environment. For VA, the environment corresponds to a specific computer network; the reward signal provides positive reward for activity that is detrimental to a network and negative reward for activity that is detected as malicious (hence cannot harm the network). The strategy discovered by RL gives a method for one or more agents to attack the network without being detected. In this proposal, the focus is on using RL techniques to discover VA in Peer-to-Peer networks. The broader impact of this project will include bridging the gap between AI and network research communities for the purpose of providing a strong defense against network attacks. Research results will be disseminated through a website at http://www.eecs.orst.edu/~thinhq/research/AI_Security/index.html. The research project will provide a hands-on research and learning environment for students and contribute to the development of Cyber Trust workforce.

本项目将人工智能（AI）技术应用于计算机网络的主动漏洞评估（VA）。当前基于库的VA方法不允许利用已知攻击特征库之外的漏洞。该提案通过开发先进的人工智能技术，向下一代主动VA软件迈出了第一步，这些技术可以学习攻击计算机网络，从而在这些弱点被利用之前发现其漏洞和弱点。最初的工作将VA置于强化学习（RL）的框架内，因为这种方法已经在其他网络问题上取得了成功。RL研究人员研究基于与环境相互作用时收到的奖励信号，为一个或多个代理学习高奖励策略的算法。对于VA，环境对应于特定的计算机网络；奖励信号为对网络有害的活动提供积极奖励，为被检测为恶意的活动提供消极奖励（因此不会损害网络）。RL发现的策略为一个或多个代理攻击网络而不被发现提供了一种方法。在这个建议中，重点是使用RL技术来发现点对点网络中的VA。该项目的更广泛影响将包括弥合人工智能和网络研究社区之间的差距，以提供强大的网络攻击防御。研究结果将通过http://www.eecs.orst.edu/~thinhq/research/AI_Security/index.html网站发布。该研究项目将为学生提供一个动手研究和学习的环境，并有助于网络信托员工队伍的发展。