SGER: Architecting Effective Computer Security Grand Challenge Competitions

提案编号：0749648 PI：Nicholas Weaver 机构：国际计算机科学研究所，加州伯克利大学 职务名称： SGER：大型挑战赛（GCC），如DARPA机器人挑战赛或安萨里X奖，可以激励社区，即使是那些目前没有资助的社区，产生可以产生变革性影响的研究成果。 有人建议NSF创建一个 GCC在计算机安全领域。 PI与NSF和其他机构合作，确定了计算机安全竞赛的一些困难，包括需要确保社区的利益，制定公平可信的参赛规则，确保任何竞赛都能有效地展示公众形象并产生有用的结果。基于这些见解，PI正在制定与几所大学或在研讨会或会议上联合举行的初步和缩小规模的竞争规则。 如果成功，将大规模设计和提供完整的GCC。 一个关键问题是竞争的例子。 PI正在设计基于自我防御网络的竞赛，其中竞争对手将获得一个参考系统，他们的自动化工具（防御）必须尝试在没有人为干预的情况下发现和删除漏洞。

Proposal Number: 0749648PI: Nicholas Weaver Institution: International Computer Science Institute, University of California Berkeley Title: SGER: Architecting Effective Computer Security Grand Challenge CompetitionsProposal summary: A Grand Challenge Competition (GCC), such as the DARPA robot grand challenge or the Ansari X Prize can energize the community, even those not currently funded, to produce research results that can have a transformative impact. It has been suggested that NSF create a GCC in the area of computer security. Working with NSF and other agencies, the PI identifies some of the difficulties attendant to such a competition on computer security, including the need to ensure the interest of the community, to develop a fair and credible rule set for judging entries, to ensure that any competition both presents an effective public face and will produce useful results.Based on these insights, the PI is developing rules for an initial and scaled-down competition to be held in conjunction with a few universities or at a workshop or conference. If successful, the full GCC would be designed and offered on a large scale. A key issue is the competition example. The PI is designing the competition based on a self-defending network, wherein the competitors would be given a reference system which their automated tools (the defense) must attempt to discover and remove vulnerabilities without human intervention.