CCRI: ENS: Modernizing and Streamlining DeterLab Testbed Experimentation

CCRI：ENS：现代化和简化 DeterLab 测试床实验

• 批准号: 2016643
• 负责人: Jelena Mirkovic
• 金额: $ 200万
• 依托单位: University of Southern California
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2020
• 资助国家: 美国
• 起止时间: 2020-10-01 至 2023-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2016643&HistoricalAwards=false
• 关键词: CCRI; ENS; Modernizing; Streamlining; DeterLab

This project modernizes the publicly available DeterLab cybersecurity testbed by: (1) updating the community research infrastructure (switches and nodes) to support large scale, virtualized experiments, (2) streamlining the experimentation process to broaden participation of new user communities. One third of the institutions using DeterLab today are community colleges and smaller universities, which lack dedicated research infrastructure. This new generation of Community Research Infrastructure will offer powerful assistance to level the playing field for the underserved research and student populations.The project will be carried out through a groundbreaking program to: (1) modernize the community research infrastructure of the public DeterLab testbed for cybersecurity experimentation, and to (2) streamline the experimentation process to broaden participation of new user communities. Research infrastructure modernization will be achieved with three architectural changes: (1) replacing current, 15-year old network switches with modern whitebox switches, which support programmable software-defined networking (SDN) and Ethernet Virtual Private Network (EVPN) with Virtual Extensible LAN (VXLAN) dataplane encapsulation, (2) replacing all dated (over 10 years) old PC nodes with 144 high-density nodes, which support virtualization of many nodes on one physical node, (3) replacing current, outdated, testbed software, based on Emulab, with modular and modern Merge software. These changes will modernize the testbed, making it more robust, reliable, and self-sustainable, supporting many more users through resource virtualization. These changes will additionally enable users to perform large-scale experiments with reconfigurable topologies and across multiple testbeds.The project will further streamline the experimentation process on the modernized DeterLab testbed by: (1) fully integrating several solutions for testbed experimentation (virtualization, traffic generators, orchestration software, malware experimentation environment, etc.), developed over the years, with the mainstream testbed software, documenting them and making them available to all users, (2) providing a set of experiment templates in several cybersecurity domains that users can start from and evolve to fit their needs; these templates will include the newly-integrated experimentation solutions, (3) offering live and recorded Webinars on monthly basis, and offering tutorials and demos at cybersecurity conferences and workshops, as well as diversity conferences and workshops, to attract new users to the modernized DeterLab testbed. Streamlining the experimentation process will make it easier for current users to design and perform experiments, and will attract and ease the on-boarding for new users. Community engagement and outreach activities will ensure that existing and new users provide input to the modernization project. Additional information on DeterLab can be found at https://deter-project.org/This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该项目通过以下方式对公共可用的DeterLab网络安全测试平台进行现代化改造：（1）更新社区研究基础设施（交换机和节点），以支持大规模的虚拟化实验;（2）简化实验过程，以扩大新用户社区的参与。目前，使用DeterLab的机构中有三分之一是社区学院和规模较小的大学，它们缺乏专门的研究基础设施。新一代的社区研究基础设施将为缺乏服务的研究和学生群体提供强大的帮助，该项目将通过一个开创性的计划来实施：（1）现代化公共DeterLab测试平台的社区研究基础设施，用于网络安全实验，（2）简化实验过程，以扩大新用户社区的参与。研究基础设施的现代化将通过三项架构变革来实现：（1）用现代白盒交换机替换当前已有15年历史的网络交换机，白盒交换机支持可编程软件定义网络（SDN）和具有虚拟可扩展LAN（VXLAN）数据平面封装的以太网虚拟专用网（EVPN），144个高密度节点的旧PC节点（超过10年），支持在一个物理节点上虚拟化多个节点，（3）用模块化的现代Merge软件替换基于Emulab的当前过时的测试平台软件。这些变化将使测试平台现代化，使其更加强大，可靠和自我可持续，通过资源虚拟化支持更多用户。该项目将通过以下方式进一步简化现代化DeterLab测试平台上的实验流程：（1）全面集成多个测试平台实验解决方案（虚拟化、流量生成器、编排软件、恶意软件实验环境等），多年来开发的主流测试平台软件，记录它们并向所有用户提供，（2）在几个网络安全领域提供一套实验模板，用户可以从这些模板开始并根据自己的需求进行改进;这些模板将包括新集成的实验解决方案，（3）每月提供实时和录制的网络研讨会，并在网络安全会议和研讨会以及多样性会议和研讨会上提供教程和演示，以吸引新用户使用现代化的DeterLab测试平台。简化实验过程将使当前用户更容易设计和执行实验，并将吸引和简化新用户的加入。社区参与和外联活动将确保现有用户和新用户为现代化项目提供投入。有关DeterLab的更多信息可以在www.example.com上找到https://deter-project.org/This奖项反映了NSF的法定使命，并被认为值得通过使用基金会的知识价值和更广泛的影响审查标准进行评估来支持。