Organization of Grand Challenges in Cyber Security

国家科学基金CISE/CNSForm 7审查分析和建议提案号：0939188小组：N/API: Giovanni vign机构：University of California ？标题：网络安全大挑战组织提案总结和智力价值：受DARPA城市挑战赛的启发，PI提供了一项计算机安全大挑战竞赛。DARPA报告说，在这项竞赛中，开发全自动汽车的团队取得了非常积极的成果，通过传感和人工智能的新方法实现自动化，争夺奖品和荣誉。安全挑战（本提案的重点）将与USENIX security， 2009一起运行。对于团队必须抵御攻击的安全挑战来说，特别具有挑战性的是需要一套清晰、明确的规则，这些规则明确地定义了成功和选择赢家的标准。对于这个挑战，参与团队的任务是构建这样一个系统，即所提供的服务器具有自我防御和抵御攻击的弹性。在比赛期间，自动计分系统将记录仍在运行的发球。同时，自动攻击系统会对服务进行破坏性攻击。由私人公司提供的奖品将颁发给服务器提供最高服务水平但也高于最低门槛的团队。与Nicholas Weaver （ICSI）和Anup Ghosh （GMU）一起，PI创建了运行比赛所需的基础设施，包括进攻和得分系统。申请的资金将用于偿还研究生和本科生参加比赛的费用。该研讨会将于2009年8月12日至13日在蒙特利尔举行。

National Science Foundation CISE/CNSForm 7 Review Analysis and RecommendationProposal Number: 0939188Panel: N/API: Giovanni VignaInstitution: University of California ? Santa BarbaraTitle: Organization of Grand Challenges in Cyber Security Proposal summary and intellectual merit: Inspired by the DARPA Urban Challenge, the PI offers to run a grand challenge competition in computer security. . DARPA reports very positive results from its competition wherein teams who developed fully automated automobiles, the automation attained by new methods in sensing and artificial intelligence, competed for prizes and glory. The security challenge, the focus of this proposal, is to be run in conjunction with USENIX Security, 2009. Particularly challenging for a security challenge wherein a team has to defend itself against attacks, is the need for a clear, well-specified set of rules which unambiguously define criteria for success and for choosing a winner. For this challenge, the task of the participant teams is to build a system such that the provided servers are self-defending and resilient against attacks. During the competition an automated scoring system will record the services that remain functional. At the same time, an automated attack system will perform disruptive attacks against the services.Prizes, provided by private companies, will be awarded to the teams whose servers provide the highest service level but also above a minimal threshold.Together with Nicholas Weaver (ICSI) and Anup Ghosh (GMU), the PI has created the infrastructure required to run the competition, including the attacking and scoring systems. The funds requested would be used to reimburse the expenses of graduate and undergraduate students participating in the competition. The workshop is to take place on August 12-13, 2009 in Montreal.