SaTC: EDU: Integrating Cybersecurity Education with Cloud Computing

SaTC：EDU：将网络安全教育与云计算相结合

• 批准号: 1821744
• 负责人: Haining Wang
• 金额: $ 30万
• 依托单位: University of Delaware
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-09-01 至 2021-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1821744&HistoricalAwards=false
• 关键词: SaTC; EDU; Integrating; Cybersecurity; Education

Cybersecurity has been identified as one of the most serious economic and national security challenges the nation faces. However, current cybersecurity education has not kept pace with the rapidly changing world of modern computing technologies. This project will produce curricular materials that will allow instructors to teach cybersecurity as it relates to cloud computing environments. A set of reusable virtual platforms will be developed, that will be used by a wide audience to effectively learn network and system security in cloud computing. The curricular materials that will be developed as a result of this project will result in more efficient student learning and engagement, which over time will lead to a better trained and prepared security workforce. Feedback from students using the materials will allow for the development of more effective teaching methods.The undergraduate and graduate cybersecurity curriculum will be updated by developing a series of laboratory exercises under the context of cloud environments. In each laboratory exercise students will be provided with the background knowledge needed to complete the exercise, and then using a reusable framework, students will develop their own code and conduct experiments independently. Students will be taught how to analyze experimental results and summarize the attack and defense strategies learned from the experiments. These course materials will allow students to become familiar with the major security and privacy issues in cloud computing, become aware of the latest progress in cloud security research, deepen their understanding of the basic concepts of network and system security, and learn the important programming and system skills via hands-on experience.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

网络安全已被确定为国家面临的最严重的经济和国家安全挑战之一。 然而，目前的网络安全教育并没有跟上现代计算技术快速变化的世界。 该项目将制作课程材料，使教师能够教授与云计算环境相关的网络安全。 将开发一套可重复使用的虚拟平台，供广大受众使用，以有效地学习云计算中的网络和系统安全。 作为该项目的结果，将开发的课程材料将导致更有效的学生学习和参与，随着时间的推移，这将导致更好的培训和准备的安全劳动力。 学生使用这些材料的反馈将有助于开发更有效的教学方法。本科生和研究生的网络安全课程将通过在云环境下开发一系列实验室练习来更新。 在每个实验练习中，学生将获得完成练习所需的背景知识，然后使用可重复使用的框架，学生将开发自己的代码并独立进行实验。 学生将学习如何分析实验结果，并总结从实验中学到的攻击和防御策略。 这些课程材料将使学生熟悉云计算中的主要安全和隐私问题，了解云安全研究的最新进展，加深对网络和系统安全基本概念的理解，并通过动手学习重要的编程和系统技能-该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

An Exploration of ARM System-Level Cache and GPU Side Channels

• DOI: 10.1145/3485832.3485902
• 发表时间: 2021-12
• 期刊: Proceedings of the 37th Annual Computer Security Applications Conference
• 作者: P. Cronin;Xing Gao;Haining Wang;Chase Cotton

DNSonChain: Delegating Privacy-Preserved DNS Resolution to Blockchain

DNSonChain：将保护隐私的 DNS 解析委托给区块链

• DOI: 10.1109/icnp52444.2021.9651951
• 发表时间: 2021
• 期刊: 2021 IEEE 29th International Conference on Network Protocols (ICNP
• 作者: Jin, Lin;Hao, Shuai;Huang, Yan;Wang, Haining;Cotton, Chase
• 通讯作者: Cotton, Chase

A Comprehensive Measurement-based Investigation of DNS Hijacking

• DOI: 10.1109/srds53918.2021.00029
• 发表时间: 2021-09
• 期刊: 2021 40th International Symposium on Reliable Distributed Systems (SRDS)
• 作者: Rebekah Houser;Shuai Hao;Zhou Li;Daiping Liu;Chase Cotton;Haining Wang

Understanding the Impact of Encrypted DNS on Internet Censorship

了解加密 DNS 对互联网审查的影响

• DOI: 10.1145/3442381.3450084
• 发表时间: 2021
• 期刊: WWW '21: Proceedings of the Web Conference 2021
• 作者: Jin, Lin;Hao, Shuai;Wang, Haining;Cotton, Chase
• 通讯作者: Cotton, Chase