CyberTrust Center: Security Through Interaction Modeling (STIM)

提案编号：nsf -0433540标题：通过交互建模（STIM）的安全性PI: Michael ReiterComputer误用在特定情况下通常比在一般情况下更容易识别，并且对经验和上下文高度敏感。然而，很少有计算机安全技术，如果有的话，充分利用经验和背景模型来防止误用。本研究探讨了这样一个论点，即许多计算机防御可以通过以一种允许模型成为防御系统不可或缺的元素的方式对经验和上下文进行建模，从而在有效性和可用性方面得到显着改善。可以建模和潜在利用的交互无处不在——它们存在于人与人之间（例如，访问控制中的不同用户角色），存在于计算机和网络之间（例如，哪些计算机和网络通常与其他计算机和网络相对应），甚至存在于攻击之间（例如，哪些攻击实现了其他攻击的先决条件）。开发更好地利用这种交互的安全技术构成了“通过交互建模实现安全”（STIM）研究议程的核心。这项工作有望在安全技术的各个领域取得进展，例如攻击流量过滤、更可用的授权系统以及入侵检测和响应。STIM活动的一个中心目标是教育和推广。它在这方面的努力包括建立一个安全教育门户网站，并为从儿童到大学教师的许多教育层次提供网络安全课程。

Proposal Number: NSF-0433540Title: Security Through Interaction Modeling (STIM)PI: Michael ReiterComputer misuse is often easier to recognize in particular instances than it is to specify in general, and is highly sensitive to experience and context. Nevertheless, few computer security technologies, if any, adequately utilize models of experience and context in defending against misuse. This research explores the thesis that many computer defenses can be dramatically improved, in both efficacy and usability, by modeling experience and context in a way that allows the models to become an integral element for defending the system. The interactions that can be modeled and potentially exploited are ubiquitous---they exist among persons (e.g., different user roles in access control), among computers and networks (e.g., what computers and networks typically correspond with what others), and even among attacks (e.g., what attacks realize the preconditions of others). Developing security technologies that better utilize such interactions forms the core of the research agenda in "security through interaction modeling" (STIM). This effort promises advances in diverse areas of security technology, such as attack traffic filtering, more usable authorization systems, and intrusion detection and response. A central goal of the STIM activity is education and outreach. Its efforts here include the construction of a security education portal and cybersecurity curricula for many education levels, ranging from children through college faculty.