CT-ISG: Population Studies in Computer Security via DNS Monitoring

CT-ISG：通过 DNS 监控进行计算机安全人口研究

• 批准号: 0830838
• 负责人: Edward Felten
• 金额: $ 39万
• 依托单位: Princeton University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-09-01 至 2011-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0830838&HistoricalAwards=false
• 关键词: CT; ISG; Population; Studies; Computer

This project seeks to understand and analyze the global demography of cybersecurity threats and solutions. It is structured as a population study, in three majors parts. First, a real time monitoring infrastructure captures a new dataset on the population characteristics of malicious software, and of security tools, as they are actually found across the world. The monitoring infrastructure can compile frequent statistical estimates of the prevalence of various identified software programs, both malicious and protective, at an identified set of online sites, in a manner that does not compromise the privacy of end users. Second, the data is analyzed for insight to drive enhancements in cybersecurity. For example, analyses can look for correlations between malware prevalence and other factors such as site characteristics and the use of protective software, controlling for various factors. Third, the data set is to be published online in both raw and processed forms, to allow further research across computer security and a range of other fields, while at the same time educating the public at large about cybersecurity threats.

该项目旨在了解和分析网络安全威胁和解决方案的全球人口统计。 它的结构是一项人口研究，分为三个主要部分。 首先，真实的时间监控基础设施捕获关于恶意软件和安全工具的群体特征的新数据集，因为它们实际上在世界各地被发现。 监视基础设施可以以不损害最终用户的隐私的方式，在所识别的一组在线站点处编译各种所识别的软件程序（恶意的和保护性的）的流行率的频繁统计估计。 其次，分析数据以获得洞察力，从而推动网络安全的增强。 例如，分析可以寻找恶意软件流行率与其他因素之间的相关性，例如网站特征和保护软件的使用，控制各种因素。 第三，数据集将以原始和处理后的形式在线发布，以便在计算机安全和其他一系列领域进行进一步研究，同时教育公众了解网络安全威胁。