II-EN: A Real-Time Lens into Dark Space of the Internet

网络望远镜是为数不多的能够在全球范围内看到与安全相关的事件的仪器之一，它可以观测到通过分配的地址空间发送的未经请求的互联网流量。CAIDA的研究人员正在扩展他们的望远镜仪器，以使研究人员能够利用这一独特的全球数据源，并提高我们对大规模攻击和恶意软件传播等与安全相关事件的理解。网络监控的这一创新转变解决了网络流量研究中普遍存在的挑战：收集和存储、有效的管理以及受隐私保护的大量数据共享。CAIDA的研究人员正在开发观察到的流量的分类，包括DoS攻击、漏洞扫描和恶意软件传播的类别。Sucha分类法有助于实时检测值得对感兴趣的研究人员进行更全面的测量、分析和通知的事件。该项目还将为接受审查的研究人员提供基础设施，以便在收集数据后大约一小时运行分析程序。CAIDA开发了一个隐私敏感的数据共享框架，该框架将隐私增强技术与经过验证的和标准的隐私原则以及数据寻求者和数据提供者的义务相结合。该项目的结果将有助于制定早期检测、反应和缓解策略，支持全球打击普遍存在的恶意软件。利用望远镜数据样本创建教育数据包将把这项研究与教育成果联系起来。最重要的是，该项目提供了方便的远程访问丰富的数据、计算资源和互联网专业知识，旨在支持网络安全研究。

Network telescopes, which observe unsolicited Internet traffic sent tounassigned address space, are one of the few types of instrumentationthat allow global visibility into a wide range of security-related events.CAIDA researchers are expanding their telescope instrumentation to enableresearchers to exploit this unique global data source and improve ourunderstanding of security-related events such as large-scale attacks andmalware spread. This innovative shift in network monitoring addressessevearal pervasive challenges in network traffic research: collectionand storage, efficient curation, and privacy-protected sharing of largevolumes of data.CAIDA researchers are developing a taxonomy of observed traffic, includingclasses of DoS attacks, vulnerability scans, and malware spread. Sucha taxonomy facilitates real-time detection of events that merit morecomprehensive measurement and analysis and notification of interestedresearchers. This project will also enable infrastructure for vettedresearchers to run analysis programs approximately one hour after datacollection. CAIDA has developed a privacy-sensitive data sharing frameworkthat integrates privacy-enhancing technology with proven and standardprivacy principles and obligations of data seekers and data providers.The results of this project will contribute to developing early detection,reaction and mitigation strategies supporting the global fight againstpervasive malware. Creation of educational data kits out of telescopedata samples will link this research to educational outcomes. Mostimportantly, this project provides convenient remote access to a wealthof data, computing resources and Internet expertise aimed at supportingnetwork security research.