CC*DNI Integration (Area 4): Application Aware Software-Defined Networks for Secure Cloud Services (SecureCloud)

应用感知、软件定义的安全云服务网络(SecureCloud)项目设计和构建了一个创新的网络基础设施，用于云计算网络和增强数据安全性，同时不降低网络性能。SecureCloud是对新的、高度复杂的网络安全威胁的回应，这些威胁伴随着云计算的出现而出现，并将国家网络安全基础设施置于风险之中。网络攻击是最近一系列问题的罪魁祸首，从窃取个人信息和干扰金融交易到威胁国家安全和政府运作。SecureCloud正在研究1)如何将多组件恶意软件渗透的影响降至最低，2)如何提高威胁可见性和响应时间。该项目开发、测试和部署了在整个云基础设施中实施的全自动安全系统。该系统的原型是在马里斯特学院的软件定义网络(SDN)试验台上进行的，并首先在地区和纽约州范围内的网络上部署到生产中。SecureCloud使用SDN动态重新调配网络资源，以应对迫在眉睫的攻击。该基础设施包括对虚拟网络功能的控制，例如虚拟路由器/防火墙组合、城域网络中的流量分离，以及使用网络流量分析集成来自其他数据源的威胁情报。主要目标是1)启用新的网络功能以保护网络免受恶意软件和拒绝服务攻击；2)提高对安全威胁的可见性和响应时间；3)隔离受感染的计算机；以及4)向社区贡献新的开源软件，以便与广泛的应用程序集成。

The Application-Aware, Software-Defined Networks for Secure Cloud Services (SecureCloud) project designs and builds an innovative cyberinfrastructure for cloud computing networks and enhancing data security without degrading network performance. SecureCloud is a response to the growth of new, highly sophisticated cybersecurity threats that have accompanied the emergence of cloud computing and placed national cybersecurity infrastructure at risk. Cyber attacks are responsible for a range of recent problems ranging from theft of personal information and interfering with financial transactions to threatening national security and government operations.SecureCloud is studying 1) how to minimize the impact of multi-component malware infiltration and 2) how to improve threat visibility and response time. The project develops, tests, and deploys a fully automated security system that is implemented throughout the cloud infrastructure. The system is prototyped in a software-defined networking (SDN) test bed at Marist College, and first deployed into production across regional and New York State-wide networks. SecureCloud uses SDN to dynamically re-provision network resources in response to impending attacks. The infrastructure includes control of virtual network functions such as virtual router/firewall combinations, traffic flow segregation in metropolitan area networks, and integration of threat intelligence from other data sources using network traffic analytics. The overarching goals are to 1) enable new network functionality to protect networks from malware and denial of service attacks; 2) improve visibility and response time to security threats, 3) quarantine infected computers, and 4) contribute new open source software to the community for integration with a wide range of applications.