TC: EAGER: Investigations of Next-generation Network Reconnaissance Attack Techniques and Limitations

本项目的目标是研究下一代网络攻击侦察技术，并探索现有防御措施的局限性。这项调查的结果有助于了解网络侦察攻击中潜在的游戏规则改变，以及它们如何演变，以便能够快速安全地发现和导航网络。该项目特别探索了新的扫描技术，通过智能主动探测远程发现防火墙安全策略，而无需探测终端主机。该项目的成果如果成功，预计将为网络防御提供变革性的观点，特别是反扫描技术，超越传统的入侵检测/防御系统。由于这种高瞻远瞩、急切的方案表现出高风险，它也带来了高价值，即总是领先于攻击者一大步。这项研究引发了对安全配置的隐私性和现有对抗未来高级攻击的有效性的严重担忧。提出的研究议程可能会使研究人员和供应商考虑从根本上超越现有的入侵检测系统和入侵检测系统的新的防御概念。该项目还刺激了对下一代网络攻击的理论和预测。

This goal of this project is to investigate next-generation network attack reconnaissance techniques, and explore the limitation for existing defenses. The result of this investigation offers understanding of potential game-changing in network reconnaissance attacks and how they can evolve in order to enable discovering and navigating the network quickly and safely. The project particularly explores novel scanning techniques to discover firewall security polices remotely via intelligent active probing, and without probing the end-hosts. The outcome of this project, if successful, is expected to offer transformative views to network defense, particularly counter-scanning techniques, beyond traditional intrusion detection/prevention systems. As this far-forward looking EAGER proposal exhibits high-risk, it also entails high-value that is to be always many steps ahead of attackers.This research arises serious concerns about the privacy of security configuration and the effectiveness of existing counter-measures against future advanced attacks. The proposed research agenda may make researchersas well as vendors consider fundamentally new defense concepts beyond the current IDS and IPS.This project also stimulates theorizing and predicting next-generation network attacks.