Collaborative Research: Automated and Adaptive Diversity for Improving Computer Systems Security

提案编号：美国国家科学基金会合作提案CCR-0311808和CCR-0311686标题：提高计算机系统安全性的自动化和自适应多样性PI：黎明宋摘要：多样性是生物系统鲁棒性的重要来源。 由于每个个体的特性略有不同，因此任何单一病原体都不太可能消除或逃脱整个种群。 相比之下，今天的计算机系统在很大程度上是同质的，由一个或两个操作系统和少数几个软件供应商的一些常见应用程序压倒性地主导。 这一事实经常被攻击者通过互联网蠕虫利用，如红色代码，它在短短9个小时内利用一个缓冲区溢出漏洞感染了25万多个系统。该项目将开发自动和系统地使计算机系统多样化的方法-探索系统各级的多样性和各种目的，例如，使系统更难被破坏，使系统即使在成功破坏之后也更难被破坏，并且使成功破坏更难逃避检测。 为了取得成功，这项工作中探索的许多机制必须隐藏或伪装有关攻击者的系统细节的信息，这个主题将成为几个项目的基础。

Proposal Number: NSF Collaborative Proposals CCR-0311808 andCCR-0311686 Title: Automated and Adaptive Diversity for Improving Computer SystemSecurity PI: Dawn Song Abstract: Diversity is an important source of robustness in biological systems. Because each individual has slightly different properties, it is unlikely that any single pathogen will eliminate or escape the entire population. By contrast, today's computer systems are largely homogeneous, being overwhelmingly dominated by one or two operating systems and a few common applications from a handful of software vendors. This fact is routinely exploited by attackers via Internet worms such as Code Red, which infected over 250,000 systems in just nine hours using a single buffer overflow vulnerability. The project will develop methods for diversifying computer systems automatically and systematically -- exploring diversity at various levels of a system and for various purposes, e.g., to make a system more difficult to compromise, to make a system more difficult to damage even after a successful compromise, and to make it more difficult for a successful compromise to evade detection. In order to succeed, many of the mechanisms explored in this work must hide or disguise information about system specifics from an attacker, and this theme will underlie several of the projects.