TWC: TTP Option: Large: Collaborative: Internet-Wide Vulnerability Measurement, Assessment, and Notification

TWC：TTP 选项：大型：协作：互联网范围内的漏洞测量、评估和通知

• 批准号: 1518888
• 负责人: J Alex Halderman
• 金额: $ 61.83万
• 依托单位: Regents of the University of Michigan - Ann Arbor
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-09-01 至 2023-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1518888&HistoricalAwards=false
• 关键词: TWC; TTP; Option; Large; Collaborative

This project aims to reduce the impact of software vulnerabilities in Internet-connected systems by developing data-driven techniques for vulnerability measurement, assessment, and notification. Recent advances in Internet-wide scanning make it possible to conduct network surveys of the full public IPv4 address space in minutes. These advances, in turn, offer the promise of truly effective community responses: when new vulnerabilities are announced, the Internet security community can comprehensively identify the systems that suffer from these vulnerabilities and automatically take steps to help affected system operators correct the problems. This project seeks to directly impact the availability and reliability of the Internet and provide the security community with tools, platforms, and comprehensive vulnerability measurement data.To achieve this vision, this project develops new techniques for vulnerability measurement, including creating improved security measurement techniques that function at global scale, in the presence of heterogeneous network systems, and in a timely, accurate, complete, and ethical manner. The investigators create new vulnerability assessment methods that lower the barriers faced by researchers seeking to access and analyze vulnerability measurement data, in order to maximize security benefits. The project explores new notification mechanisms that achieve targeted and effective notification of affected organizations, and that can be delivered and acted upon quickly in response to the emergence of new threats.

该项目旨在通过开发以数据驱动的技术来测量漏洞测量，评估和通知来减少软件漏洞在Internet连接系统中的影响。 范围内扫描的最新进展使得可以在几分钟内对完整的公共IPv4地址空间进行网络调查。 这些进步反过来又提供了真正有效的社区回应的承诺：当宣布新的漏洞时，互联网安全社区可以全面识别遭受这些漏洞的系统，并自动采取步骤来帮助受影响的系统操作员纠正问题。该项目旨在直接影响互联网的可用性和可靠性，并为安全社区提供工具，平台和全面的脆弱性测量数据。为了实现这一愿景，该项目开发了用于漏洞测量的新技术，包括创建改进的安全测量技术，在全球范围内，在全球范围内运行，并在异性网络系统的存在下以及及时的，及时，完整的，且良好的方式，又有道德，并在全球范围内发挥作用。研究人员创建了新的漏洞评估方法，以降低寻求访问和分析漏洞测量数据的研究人员所面临的障碍，以最大程度地提高安全利益。该项目探讨了新的通知机制，以实现有针对性的组织的有效通知，并且可以迅速运送并采取行动，以应对新威胁的出现。

项目成果

Can Voters Detect Malicious Manipulation of Ballot Marking Devices?

选民能否检测到选票标记设备的恶意操纵？

• DOI: 10.1109/sp40000.2020.00118
• 发表时间: 2020
• 期刊: 2020 IEEE Symposium on Security and Privacy (SP
• 作者: Bernhard, Matthew;McDonald, Allison;Meng, Henry;Hwa, Jensen;Bajaj, Nakul;Chang, Kevin;Halderman, J. Alex
• 通讯作者: Halderman, J. Alex

Conjure: Summoning Proxies from Unused Address Space

• DOI: 10.1145/3319535.3363218
• 发表时间: 2019-11
• 期刊: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security
• 作者: Sergey Frolov;Jack Wampler;Sze Chuen Tan;J. A. Halderman;N. Borisov;Eric Wustrow

Characterizing Transnational Internet Performance and the Great Bottleneck of China

跨国互联网表现特征和中国的巨大瓶颈

• DOI: 10.1145/3379479
• 发表时间: 2020
• 期刊: Proceedings of the ACM on Measurement and Analysis of Computing Systems
• 作者: Zhu, Pengxiong;Man, Keyu;Wang, Zhongjie;Qian, Zhiyun;Ensafi, Roya;Halderman, J. Alex;Duan, Haixin
• 通讯作者: Duan, Haixin

Let's Encrypt: An Automated Certificate Authority to Encrypt the Entire Web

• DOI: 10.1145/3319535.3363192
• 发表时间: 2019-01-01
• 期刊: PROCEEDINGS OF THE 2019 ACM SIGSAC CONFERENCE ON COMPUTER AND COMMUNICATIONS SECURITY (CCS'19)
• 作者: Aas, Josh;Barnes, Richard;Warren, Brad
• 通讯作者: Warren, Brad

UnclearBallot: Automated Ballot Image Manipulation

UnclearBallot：自动选票图像处理

• 发表时间: 2021
• 期刊: Proc. 4th International Joint Conference on Electronic Voting (E-Vote-ID ’19
• 作者: Matthew Bernhard, Kartikeya Kandula