TWC: Small: Automatic Detection of Protocol Manipulation Attacks in Large Scale Distributed Systems Implementations

TWC：小型：大规模分布式系统实现中协议操纵攻击的自动检测

• 批准号: 1223834
• 负责人: Cristina Nita-Rotaru
• 金额: $ 25万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-09-01 至 2015-11-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1223834&HistoricalAwards=false
• 关键词: TWC; Small; Automatic; Detection; Protocol

The main research focus of this proposal is to create a platform that allows to automatically find attacks in unmodified binaries of distributed systems. The attacks are conducted through message manipulation by insider attackers and impact primarily performance and availability. The platform combines existent open-source virtualization environments such as KVM, and network simulation and emulation tools such as NS3, to create a realistic environment in which target systems will run. The platform is general, scalable, and can be used for testing a large variety of distributed systems such as intrusion-tolerant and peer-to-peer systems.The platform will improve the trust that distributed systems work according to their intended specifications in spite of faults, misconfigurations, or attacks.The platform can serve as a tool for system developers from industry, government labs, and academia to test their systems. In addition, it can be used for programing exercises for distributed systems and computer security courses at both undergraduate and graduate level.

该提案的主要研究重点是创建一个平台，允许在分布式系统的未修改的二进制文件中自动查找攻击。 这些攻击是由内部攻击者通过消息操纵进行的，主要影响性能和可用性。该平台结合了现有的开源虚拟化环境（如KVM）和网络模拟和仿真工具（如NS3），以创建一个目标系统将在其中运行的真实环境。该平台具有通用性强、可扩展性好等特点，可用于测试各种分布式系统，如入侵容忍系统、对等系统等，提高了人们对分布式系统在故障、配置错误或攻击等情况下仍能按照预期规范工作的信任度，为工业界、政府实验室和学术界的系统开发人员提供了一个测试系统的工具。此外，它可以用于分布式系统和计算机安全课程在本科和研究生水平的编程练习。