Collaborative Research: SaTC: EDU: A Hands-on Approach to Securing Self-Driving Networks

合作研究：SaTC：EDU：保护自动驾驶网络安全的实践方法

• 批准号: 2203094
• 负责人: Ali Tosun
• 金额: $ 22.64万
• 依托单位: University of North Carolina at Pembroke
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-02-01 至 2024-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2203094&HistoricalAwards=false
• 关键词: Collaborative; Research; SaTC; EDU; Hands

This award is funded in whole or in part under the American Rescue Plan Act of 2021 (Public Law 117-2). Today’s computer networks have grown both in complexity and in scale, in part as a response to diverse connectivity requirements in the era of the Internet of Things, Cloud 3.0, and Big Data. Existing network management solutions cannot keep up with the demand for solutions to real-time network management problems resulting from these increasingly complex networks. Network management requires a fundamentally new approach in which networks can autonomously control, configure, and manage themselves. While these “self-driving networks” offer numerous opportunities for efficient network management, they introduce new threats and attack vectors that must be addressed to secure them. Unfortunately, there is currently a shortfall of professionals trained in autonomous and intelligent network security and a shortfall of content with which to train these professionals. This project will address these shortfalls by developing lab-intensive modules that enable undergraduate students to gain fundamental and advanced knowledge in securing next-generation self-driving networks. The project team will develop six self-contained modules with comprehensive coverage of the techniques, tools, and methods required to secure self-driving networks. The modules will cover (1) attack investigation and analysis of legacy, Software Defined Networking (SDN), and adversarial attacks; (2) hunting for vulnerabilities using static analysis, software component analysis, automated known attack patterns, and behavioral analysis; (3) network-wide data collection using classic and OpenFlow based approaches; (4) protection using runtime application self-protection, automated patching, and security information and event management; (5) evaluation using continuous adaptive risk and thrust assessment; and (6) action using security orchestration, automation and response. In addition, this project aims to increase the participation of underrepresented groups in STEM by organizing workshops and participating in professional conferences. The project team will also organize a workshop to disseminate the modules to interested faculty members from other organizations.This project is supported by the Secure and Trustworthy Cyberspace (SaTC) program, which funds proposals that address cybersecurity and privacy, and in this case specifically cybersecurity education. The SaTC program aligns with the Federal Cybersecurity Research and Development Strategic Plan and the National Privacy Research Strategy to protect and preserve the growing social and economic benefits of cyber systems while ensuring security and privacy.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该奖项的全部或部分资金来自《2021年美国救援计划法案》(公法117-2)。今天的计算机网络在复杂性和规模上都有所增长，部分原因是为了应对物联网、云3.0和大数据时代的多样化连接要求。现有的网络管理解决方案不能跟上对由这些日益复杂的网络引起的实时网络管理问题的解决方案的需求。网络管理需要一种全新的方法，使网络能够自主控制、配置和管理自己。虽然这些“自动驾驶网络”为高效的网络管理提供了大量机会，但它们也带来了新的威胁和攻击媒介，必须加以解决才能确保它们的安全。不幸的是，目前缺乏接受自主和智能网络安全培训的专业人员，也缺乏培训这些专业人员的内容。该项目将通过开发实验密集型模块来解决这些不足，使本科生能够获得保护下一代自动驾驶网络的基础和高级知识。该项目团队将开发六个独立的模块，全面涵盖保护自动驾驶网络所需的技术、工具和方法。这些模块将涵盖(1)对遗留、软件定义网络(SDN)和对手攻击的攻击调查和分析；(2)使用静态分析、软件组件分析、自动化已知攻击模式和行为分析来寻找漏洞；(3)使用经典和基于OpenFlow的方法收集网络范围的数据；(4)使用运行时应用程序自我保护、自动修补以及安全信息和事件管理进行保护；(5)使用持续自适应风险和推力评估进行评估；以及(6)使用安全协调、自动化和响应来执行操作。此外，该项目旨在通过组织讲习班和参加专业会议，增加代表不足的群体在STEM中的参与。项目团队还将组织一次研讨会，向来自其他组织的感兴趣的教职员工传播这些模块。该项目得到了安全和值得信赖的网络空间(SATC)计划的支持，该计划为解决网络安全和隐私问题的提案提供资金，在这种情况下，特别是网络安全教育。SATC计划与联邦网络安全研究和发展战略计划和国家隐私研究战略保持一致，以保护和维护网络系统日益增长的社会和经济效益，同时确保安全和隐私。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。