SaTC: CORE: Small: Collaborative: An Integrated Approach for Enterprise Intrusion-Resilience

最近流行的高级网络攻击导致企业违规行为，在国防，制造业和金融业等关键部门造成严重后果。当前的防御实践依赖于攻击预防和检测技术，但我们对这些安全工具应对真正高级威胁的能力的理解严重缺乏，这些威胁的复杂性迅速增长。该项目旨在通过系统地设计一个新的多层入侵弹性框架来加强企业安全性，以应对高级威胁，该框架既可解决单个企业防御问题，也可解决全球性的社区保护问题。总的来说，该项目的重点是教育活动，与代表性不足的少数群体的联系以及向工业界的技术转让，旨在为安全界提供一种新的整体防御方法，以提高我们国家基础设施的安全地位。 该项目为企业入侵恢复能力开发了一个新的框架，该框架：（1）保护个人资产和整个企业;（2）通过设计本身具有入侵弹性的安全工具来适应攻击者的策略;（3）促进跨企业和行业的新的协调保护，同时保护共享数据的隐私。这些解决方案利用密码学、博弈论建模和基于社区的防御来提供强大的入侵恢复能力，以抵御高级威胁。调查人员计划与安全行业积极接触，以评估他们在实际环境中的技术，并就保护我们国家基础设施的地方和协调防御战略提供具体建议。通过教育学生和网络专业人员，以及开展一系列的外展活动，以社区，该项目旨在提高对新兴的攻击技术和最佳的主动防御，成功地减轻未来的网络攻击的认识。

The recent prevalence of advanced cyber attacks has caused enterprise breaches with severe consequences in critical sectors, such as national defense, manufacturing and the financial industry. Current defense practices rely on attack prevention and detection technologies, but our understanding of the capabilities of these security tools against truly advanced threats, which rapidly grow in sophistication, is severely lacking. This project seeks to harden enterprise security against advanced threats by systematically designing a new multi-layer intrusion-resilient framework that addresses individual enterprise defenses, as well as global, community-based protections. Overall, with a focus on educational activities, outreach to under-represented minority groups and technology transfer to industry, this project aims at contributing a new holistic defense approach to the security community that increases the security stance of our national infrastructures. This project develops a new framework for enterprise intrusion resilience that: (1) protects both individual assets and enterprises as a whole; (2) adapts to attacker's strategies by devising security tools that are themselves resilient to breaches; and (3) promotes new coordinated protections across enterprises and industry sectors while protecting the privacy of shared data. These solutions leverage cryptography, game-theoretical modeling, and community-based defenses to provide strong intrusion resilience against advanced threats. The investigators plan to engage actively with the security industry to evaluate their techniques in practical settings and provide concrete recommendations on local and coordinated defensive strategies for protecting our national infrastructures. By educating students and cyber professionals, as well as conducting a range of outreach activities to the community, this project seeks to increase awareness of emerging attack techniques and best proactive defenses for successfully mitigating the cyber attacks of the future.