II-New: A Dual-Purpose Data Analytics Laboratory

II-新：双用途数据分析实验室

• 批准号: 1629973
• 负责人: Alex Snoeren
• 金额: $ 54.87万
• 依托单位: University of California-San Diego
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-08-01 至 2020-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1629973&HistoricalAwards=false
• 关键词: II; New; Dual; Purpose; Data

The research enabled by the supported infrastructure has the potential to dramatically impact society in two ways. First, by undermining entire cyber-crime ecosystems: disrupting underground activities, infrastructure, and social networks through strategic intervention. Inhibiting the flow of money reduces the profitability of these activities, thereby subverting the key incentive underlying modern cybercrime. Second, improved efficiency of data center networks will significantly reduce operating costs and increase energy efficiency. The infrastructure will also create educational opportunities for students at a variety of levels, expanding the research skills of postdoc, graduate, and undergraduate students to address both data center network design and security research challenges.This project is to pursue two separate multi-year research agendas. One is to collect and analyze extremely large datasets pertaining to various aspects of Internet malware and cybercrime while concurrently exploring new high-performance hybrid optical/electrical network architectures that dramatically decrease the cost and complexity of the infrastructure required to support such analytics. This award supports compute and storage resources to both conduct the analytics required for the Ecrime research, while simultaneously serving as a testbed for our prototype hybrid network switches.The research enabled by this infrastructure has two key components: 1) Through in-depth empirical analyses of a range of online criminal activities, the PIs are developing an understanding of the shape of key economic and social forces---as seen at scale---in terms of relevance for both attackers and defenders. 2) Characterizing network traffic generated by large-scale data analytics, focusing specifically on identifying the class of network traffic that a circuit switch can support as well as the partitioning of the traffic between the circuit and packet portions of the network.

由支持的基础设施支持的研究有可能在两个方面对社会产生巨大影响。 首先，通过破坏整个网络犯罪生态系统：通过战略干预破坏地下活动、基础设施和社交网络。阻止资金流动会降低这些活动的利润，从而破坏现代网络犯罪背后的关键动机。 其次，数据中心网络效率的提高将显著降低运营成本并提高能源效率。 该基础设施还将为不同层次的学生创造教育机会，扩展博士后，研究生和本科生的研究技能，以解决数据中心网络设计和安全研究的挑战。 一个是收集和分析与互联网恶意软件和网络犯罪的各个方面相关的超大数据集，同时探索新的高性能混合光/电网络架构，从而大大降低支持此类分析所需的基础设施的成本和复杂性。 该奖项支持计算和存储资源进行Ecrime研究所需的分析，同时作为我们的原型混合网络交换机的测试平台。该基础设施支持的研究有两个关键组成部分：1）通过对一系列网上犯罪活动的深入实证分析，从攻击者和防御者的相关性来看，PI正在逐步理解关键经济和社会力量的形态--从规模上看--。 2)描述由大规模数据分析生成的网络流量，特别关注识别电路交换机可以支持的网络流量类别，以及在网络的电路和数据包部分之间划分流量。

项目成果

Reading the Tea leaves: A Comparative Analysis of Threat Intelligence

• 发表时间: 2019
• 期刊: 2020 IEEE International Conference on Big Data (Big Data)
• 作者: Vector Guo Li;M. Dunn;P. Pearce;Damon McCoy;G. Voelker;S. Savage

Trufflehunter: Cache Snooping Rare Domains at Large Public DNS Resolvers

Trufflehunter：在大型公共 DNS 解析器中缓存监听稀有域名

• DOI: 10.1145/3419394.3423640
• 发表时间: 2020
• 期刊: Proceedings of the Internet Measurement Conference (IMC'20
• 作者: Randall, Audrey;Liu, Enze;Akiwate, Gautam;Padmanabhan, Ramakrishna;Voelker, Geoffrey M.;Savage, Stefan;Schulman, Aaron
• 通讯作者: Schulman, Aaron

Hack for Hire: Exploring the Emerging Market for Account Hijacking

• DOI: 10.1145/3308558.3313489
• 发表时间: 2019-05
• 期刊: The World Wide Web Conference
• 作者: A. Mirian;Joe DeBlasio;S. Savage;G. Voelker;Kurt Thomas

Sprocket: A Serverless Video Processing Framework

• DOI: 10.1145/3267809.3267815
• 发表时间: 2018-10
• 期刊: Proceedings of the ACM Symposium on Cloud Computing
• 作者: Lixiang Ao;Liz Izhikevich;G. Voelker;G. Porter

Clairvoyance: Inferring Blocklist Use on the Internet

千里眼：推断互联网上的黑名单使用情况

• DOI: 10.1007/978-3-030-72582-2_4
• 发表时间: 2021
• 期刊: Passive and Active Measurement (PAM 2021
• 作者: Li, Vector Guo;Akitwate, Gautam;Levchenko, Kirill;Voelker, Geoffrey M.;Savage, Stefan
• 通讯作者: Savage, Stefan