Student Travel Support for CSET 2009 Workshop

可信计算招标中引用的主要领域之一是对拟议系统的安全性进行评估。评估的一种方法是通过试验台，例如nsf赞助的DETER、ORBIT和GENI系统。但是拥有一个测试平台只是评估过程的一部分，另一部分是运行可信和可信的实验。本次研讨会的目的是讨论如何创建和执行与安全性相关的可信实验。该研讨会被称为网络实验和测试研讨会（CSET），是可能继续进行的一系列研讨会中的第二个。PI，也是研讨会的组织者，已经确定了三类实验，相关的：-规模：就其性质而言，试验台永远不会有实验所需的资源，比如说，互联网规模。因此，实验必须按比例缩小，以反映试验台的大小。-多方性质：测试平台正变得越来越分散，这影响了运行实验和解释结果的方法。-风险：安全实验通常涉及必须包含且必须保证不会危及测试平台的危险代码（恶意软件）。这些和其他基本问题将在讲习班期间审议。申请的资金将用于偿还研究生和本科生的费用。研讨会将于2009年8月10日举行，与四大顶级安全研究会议之一的USENIX安全会议一起举行。

Among the major areas cited in the Trustworthy Computing Solicitation is theevaluation of the security of proposed systems. One approach to evaluation is through testbeds, such as the NSF-sponsored DETER, ORBIT, and GENI systems. But having a testbed is just one part of the evaluation process, the other being the running of believable and credible experiments. The purpose of this workshop is to deliberate on what it takes to create and execute believable experiments related to security. The workshop, called Workshop on Cyber Experimentation and Test (CSET) is the second in a series that is likely to continue. The PI, also the organizer of the workshop, has identified three classes of experiments, related to: - Scale: by their nature, testbeds will never have the resources needed for experiments that, say, are of Internet scale. So, the experiments must be scaled down to reflect the size of the testbed. - Multi-party nature: Testbeds are becoming increasingly decentralized, which impacts the approach to running experiments and to interpreting results. - Risk: Security experiments often involve dangerous code (malware) that must be contained and that must be guaranteed not to endanger the testbed. These and other fundamental issues will be deliberated on during the workshop. The funds requested would be used to reimburse the expenses of graduate and undergraduate students. The workshop is to take place on Aug. 10, 2009, in conjunction with USENIX Security, one of the four preeminent security research conferences.