TC: EAGER: Investigations of Next-generation Network Reconnaissance Attack Techniques and Limitations

TC：EAGER：下一代网络侦察攻击技术和局限性的调查

• 批准号: 1023868
• 负责人: Ehab Al-Shaer
• 金额: $ 14.5万
• 依托单位: University of North Carolina at Charlotte
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-09-01 至 2014-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1023868&HistoricalAwards=false
• 关键词: TC; EAGER; Investigations; Next; generation

This goal of this project is to investigate next-generation network attack reconnaissance techniques, and explore the limitation for existing defenses. The result of this investigation offers understanding of potential game-changing in network reconnaissance attacks and how they can evolve in order to enable discovering and navigating the network quickly and safely. The project particularly explores novel scanning techniques to discover firewall security polices remotely via intelligent active probing, and without probing the end-hosts. The outcome of this project, if successful, is expected to offer transformative views to network defense, particularly counter-scanning techniques, beyond traditional intrusion detection/prevention systems. As this far-forward looking EAGER proposal exhibits high-risk, it also entails high-value that is to be always many steps ahead of attackers.This research arises serious concerns about the privacy of security configuration and the effectiveness of existing counter-measures against future advanced attacks. The proposed research agenda may make researchersas well as vendors consider fundamentally new defense concepts beyond the current IDS and IPS.This project also stimulates theorizing and predicting next-generation network attacks.

本项目的目标是研究下一代网络攻击侦察技术，并探索现有防御的局限性。这项调查的结果提供了对网络侦察攻击的潜在游戏规则改变的理解，以及它们如何演变，以便能够快速安全地发现和导航网络。该项目特别探索了新的扫描技术，通过智能主动探测远程发现防火墙安全策略，而无需探测终端主机。该项目的成果，如果成功的话，预计将提供变革性的意见，网络防御，特别是反扫描技术，超越传统的入侵检测/预防系统。由于这一前瞻性的EAGER提案具有高风险，它也需要高价值，即总是领先于攻击者许多步骤。这项研究引起了人们对安全配置的隐私性和现有应对措施对未来高级攻击的有效性的严重关注。该研究计划将促使研究人员和供应商考虑超越当前IDS和IPS的全新防御概念，并促进下一代网络攻击的理论化和预测。