TWC: TTP Option: Large: Collaborative: Internet-Wide Vulnerability Measurement, Assessment, and Notification

该项目旨在通过开发用于漏洞测量、评估和通知的数据驱动技术来减少互联网连接系统中的软件漏洞的影响。互联网范围扫描的最新进展使在几分钟内对整个公共IPv4地址空间进行网络调查成为可能。反过来，这些进步提供了真正有效的社区响应的承诺：当宣布新的漏洞时，互联网安全社区可以全面识别受到这些漏洞影响的系统，并自动采取措施帮助受影响的系统操作员纠正问题。该项目旨在直接影响互联网的可用性和可靠性，并为安全社区提供工具、平台和全面的漏洞测量数据。为了实现这一愿景，该项目开发了新的漏洞测量技术，包括创建改进的安全测量技术，在存在异类网络系统的情况下，以及时、准确、完整和合乎道德的方式在全球范围内发挥作用。调查人员创造了新的漏洞评估方法，降低了寻求访问和分析漏洞测量数据的研究人员面临的障碍，以最大限度地提高安全效益。该项目探索了新的通知机制，以实现对受影响组织的有针对性和有效的通知，并能够在出现新的威胁时迅速交付和采取行动。

This project aims to reduce the impact of software vulnerabilities in Internet-connected systems by developing data-driven techniques for vulnerability measurement, assessment, and notification. Recent advances in Internet-wide scanning make it possible to conduct network surveys of the full public IPv4 address space in minutes. These advances, in turn, offer the promise of truly effective community responses: when new vulnerabilities are announced, the Internet security community can comprehensively identify the systems that suffer from these vulnerabilities and automatically take steps to help affected system operators correct the problems. This project seeks to directly impact the availability and reliability of the Internet and provide the security community with tools, platforms, and comprehensive vulnerability measurement data.To achieve this vision, this project develops new techniques for vulnerability measurement, including creating improved security measurement techniques that function at global scale, in the presence of heterogeneous network systems, and in a timely, accurate, complete, and ethical manner. The investigators create new vulnerability assessment methods that lower the barriers faced by researchers seeking to access and analyze vulnerability measurement data, in order to maximize security benefits. The project explores new notification mechanisms that achieve targeted and effective notification of affected organizations, and that can be delivered and acted upon quickly in response to the emergence of new threats.