CT-M: Meta-Environments for Experiments on Diverse Topics in Network Security

CT-M：网络安全不同主题实验的元环境

• 批准号: 0831427
• 负责人: Paul Barford
• 金额: $ 85万
• 依托单位: University of Wisconsin-Madison
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-09-01 至 2013-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0831427&HistoricalAwards=false
• 关键词: CT; Meta; Environments; Experiments; Diverse

Proposal Number: 0831427PI: Paul BarfordInstitution: University of Wisconsin - MadisonTitle: CT-M: Meta-Environments for Experiments on Diverse Topics in NetworkSecurityAbstractIn order to address the continued escalation in the diversity, sophistication and quantity ofmalicious activity in the Internet, new methods for systematic testing and evaluation ofnext generation security systems and techniques are required. The objective of thisresearch is to investigate and develop meta-environments for Emulab-based testbeds. Ameta-environment is a set of testbed configurations, tools and processes developed for aspecific security domain that enables experiments to be conducted in a simplified,realistic and consistent fashion. The first component of this research program is focusedon investigating tools such as traffic generators that can be used across all metaenvironments.Next, five specific meta-environments will be investigated and developedfor the following areas: 1) network intrusion detection, 2) firewalls, 3) honeynets, 4)denial of service defense, and 5) security perimeter design. Finally, mechanisms forfederation between the Wisconsin Advanced Internet Lab, DETER and other Emulabbasedtestbeds that will enable large-scale experiments and transparent access toresources will be investigated. The broader impacts of this project are that it willsimplify and accelerate the use of testbeds for security research, and enable consistentcomparisons between new security systems and tools. The expected results of this workinclude tools, configurations, and documentation for the five meta-environments andtestbed federation capability. The project also includes education and outreach activitiesthat will develop network security lab exercise materials. These web-based materials willbe openly available to the community, and will emphasize a hands-on approach intendedto provide students with practical, relevant experiences.

提案编号：0831427PI：Paul Barford机构：威斯康星大学麦迪逊分校标题：CT-M：网络安全中不同主题实验的元环境摘要为了解决互联网中恶意活动的多样性、复杂性和数量的持续升级，需要新的方法来系统测试和评估下一代安全系统和技术。本研究的目的是调查和开发基于Emulab的试验台的元环境。元环境是为特定安全领域开发的一套试验台配置、工具和流程，使实验能够以简化、现实和一致的方式进行。该研究计划的第一部分集中于研究可在所有元环境中使用的工具，如流量生成器。接下来，将针对以下方面研究和开发五个特定的元环境：1)网络入侵检测，2)防火墙，3)蜜网，4)拒绝服务防御，5)安全边界设计。最后，将调查威斯康星高级互联网实验室、Decreer和其他基于Emulabed的试验台之间的联合机制，这些试验台将能够进行大规模实验和透明地访问资源。该项目更广泛的影响是，它将简化和加快安全研究试验台的使用，并使新的安全系统和工具之间能够进行一致的比较。这项工作的预期结果包括五个元环境和试验床联合功能的工具、配置和文档。该项目还包括将编制网络安全实验室练习材料的教育和外联活动。这些基于网络的材料将向社区公开提供，并将强调实际操作的方法，旨在为学生提供实用的相关经验。