CT-M: Meta-Environments for Experiments on Diverse Topics in Network Security

点击翻译按钮获取中文摘要

Proposal Number: 0831427PI: Paul BarfordInstitution: University of Wisconsin - MadisonTitle: CT-M: Meta-Environments for Experiments on Diverse Topics in NetworkSecurityAbstractIn order to address the continued escalation in the diversity, sophistication and quantity ofmalicious activity in the Internet, new methods for systematic testing and evaluation ofnext generation security systems and techniques are required. The objective of thisresearch is to investigate and develop meta-environments for Emulab-based testbeds. Ameta-environment is a set of testbed configurations, tools and processes developed for aspecific security domain that enables experiments to be conducted in a simplified,realistic and consistent fashion. The first component of this research program is focusedon investigating tools such as traffic generators that can be used across all metaenvironments.Next, five specific meta-environments will be investigated and developedfor the following areas: 1) network intrusion detection, 2) firewalls, 3) honeynets, 4)denial of service defense, and 5) security perimeter design. Finally, mechanisms forfederation between the Wisconsin Advanced Internet Lab, DETER and other Emulabbasedtestbeds that will enable large-scale experiments and transparent access toresources will be investigated. The broader impacts of this project are that it willsimplify and accelerate the use of testbeds for security research, and enable consistentcomparisons between new security systems and tools. The expected results of this workinclude tools, configurations, and documentation for the five meta-environments andtestbed federation capability. The project also includes education and outreach activitiesthat will develop network security lab exercise materials. These web-based materials willbe openly available to the community, and will emphasize a hands-on approach intendedto provide students with practical, relevant experiences.