SaTC: CORE: Small: An Attribute-based Insider Threat Mitigation Framework
SaTC:核心:小型:基于属性的内部威胁缓解框架
基本信息
- 批准号:2406038
- 负责人:
- 金额:$ 44.2万
- 依托单位:
- 依托单位国家:美国
- 项目类别:Standard Grant
- 财政年份:2023
- 资助国家:美国
- 起止时间:2023-10-01 至 2024-08-31
- 项目状态:已结题
- 来源:
- 关键词:
项目摘要
Defending against a malicious insider who attempts to abuse his computer privileges is one of the most critical problems facing the information security segment. This is because the damage inflicted is potentially catastrophic. While the insider threat is of increasing interest in the research community, major challenges remain in addressing aspects specific to information infrastructure protection. This project aims to develop an innovative, demonstrable approach to mitigate insider threats to an organization. The new mechanisms developed in this project will substantially enhance the state-of-the-art in securing enterprises including private and public sectors. It will improve an organization's preparedness to thwart these important threats, and will reduce the risk for the organizations to be negatively influenced by these threats and endure potentially negative economic and societal impacts. The project will involve both graduate and undergraduate students, contributing to a strengthened relationship between education and research. By getting involved in different aspects of the project, students will be trained in a critical area of national security, thereby enhancing their careers and contributing to their professional growth. The project develops novel analysis, design techniques, and toolkits to better protect an organization's critical assets from insider threat and unauthorized access. Access control systems are fundamental to mitigating insider threats and attribute-based access control (ABAC) has emerged as a promising model in recent years. This project develops a comprehensive framework based on ABAC that utilizes a combination of moving target defense (MTD) and deception techniques to address insider threat challenges. This is achieved through the development of several components in a systematic way. The first is a scientific foundation for defensive deception that includes deception modeling and planning, and an approach to generate consistent and affordable deception plans for insider threat prevention. The second utilizes moving target defense techniques to increase the cost and time burden on the insider to achieve an unauthorized access by proactively changing ABAC system configurations. The third one introduces the notion of honey elements in ABAC, and integrates them with active deception and moving target defense techniques. The framework will result in a significant improvement in the security of the large-scale enterprises so that proactive countermeasures for insider threats could be deployed with consideration of the system security requirements, and effectiveness of countermeasures. The proof-of-concept prototype will demonstrate the ability to monitor insider access and enforce corresponding authorization policies to mitigate insider threats.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.
防御企图滥用其计算机特权的恶意内部人员是信息安全部门面临的最关键问题之一。这是因为造成的损害可能是灾难性的。虽然研究界对内部威胁越来越感兴趣,但主要挑战仍然是解决信息基础设施保护的具体方面。该项目旨在开发一种创新的、可演示的方法来减轻组织的内部威胁。在这个项目中建立的新机制将大大提高保障包括私营和公共部门在内的企业安全的最先进水平。它将提高组织的准备工作,以挫败这些重要的威胁,并将减少组织受到这些威胁的负面影响和承受潜在的负面经济和社会影响的风险。该项目将涉及研究生和本科生,有助于加强教育和研究之间的关系。通过参与项目的不同方面,学生将在国家安全的关键领域接受培训,从而提升他们的职业生涯并为他们的专业成长做出贡献。该项目开发了新颖的分析、设计技术和工具包,以更好地保护组织的关键资产免受内部威胁和未经授权的访问。访问控制系统是缓解内部威胁的基础,基于属性的访问控制(ABAC)近年来成为一种很有前途的模式。该项目开发了一个基于ABAC的综合框架,利用移动目标防御(MTD)和欺骗技术的组合来解决内部威胁挑战。这是通过以系统的方式开发几个组件来实现的。首先是防御性欺骗的科学基础,包括欺骗建模和计划,以及为内部威胁预防生成一致且负担得起的欺骗计划的方法。第二种方法利用移动目标防御技术,通过主动更改ABAC系统配置,增加内部人员的成本和时间负担,从而实现未经授权的访问。第三部分介绍了ABAC中蜂蜜元素的概念,并将其与主动欺骗和移动目标防御技术相结合。该框架将显著改善大型企业的安全性,从而可以在考虑系统安全需求和对策有效性的情况下部署针对内部威胁的主动对策。概念验证原型将展示监控内部访问和执行相应授权策略以减轻内部威胁的能力。该奖项反映了美国国家科学基金会的法定使命,并通过使用基金会的知识价值和更广泛的影响审查标准进行评估,被认为值得支持。
项目成果
期刊论文数量(0)
专著数量(0)
科研奖励数量(0)
会议论文数量(0)
专利数量(0)
数据更新时间:{{ journalArticles.updateTime }}
{{
item.title }}
{{ item.translation_title }}
- DOI:
{{ item.doi }} - 发表时间:
{{ item.publish_year }} - 期刊:
- 影响因子:{{ item.factor }}
- 作者:
{{ item.authors }} - 通讯作者:
{{ item.author }}
数据更新时间:{{ journalArticles.updateTime }}
{{ item.title }}
- 作者:
{{ item.author }}
数据更新时间:{{ monograph.updateTime }}
{{ item.title }}
- 作者:
{{ item.author }}
数据更新时间:{{ sciAawards.updateTime }}
{{ item.title }}
- 作者:
{{ item.author }}
数据更新时间:{{ conferencePapers.updateTime }}
{{ item.title }}
- 作者:
{{ item.author }}
数据更新时间:{{ patent.updateTime }}
Daniel Takabi其他文献
A Hybrid Policy Engineering Approach for Attribute-Based Access Control (ABAC)
基于属性的访问控制 (ABAC) 的混合策略工程方法
- DOI:
- 发表时间:
2020 - 期刊:
- 影响因子:0
- 作者:
Manar Alohaly;Daniel Takabi - 通讯作者:
Daniel Takabi
Privacy preserving Neural Network Inference on Encrypted Data with GPUs
使用 GPU 对加密数据进行隐私保护神经网络推理
- DOI:
- 发表时间:
2019 - 期刊:
- 影响因子:0
- 作者:
Daniel Takabi;Robert Podschwadt;Jeff Druce;Curt Wu;Kevin Procopio - 通讯作者:
Kevin Procopio
Poster: Packing-aware Pruning for Efficient Private Inference based on Homomorphic Encryption
海报:基于同态加密的高效私有推理的打包感知剪枝
- DOI:
- 发表时间:
2023 - 期刊:
- 影响因子:0
- 作者:
Parsa Ghazvinian;Robert Podschwadt;Prajwal Panzade;M. Rafiei;Daniel Takabi - 通讯作者:
Daniel Takabi
Daniel Takabi的其他文献
{{
item.title }}
{{ item.translation_title }}
- DOI:
{{ item.doi }} - 发表时间:
{{ item.publish_year }} - 期刊:
- 影响因子:{{ item.factor }}
- 作者:
{{ item.authors }} - 通讯作者:
{{ item.author }}
{{ truncateString('Daniel Takabi', 18)}}的其他基金
SaTC: EDU: Secure and Private Artificial Intelligence
SaTC:EDU:安全且私密的人工智能
- 批准号:
2413856 - 财政年份:2023
- 资助金额:
$ 44.2万 - 项目类别:
Continuing Grant
Building Cybersecurity Analytics Capacity in Big Data Era: Developing Hands-on Labs for Integrating Data Science into Cybersecurity Curriculum
建设大数据时代的网络安全分析能力:开发将数据科学融入网络安全课程的实践实验室
- 批准号:
2415022 - 财政年份:2023
- 资助金额:
$ 44.2万 - 项目类别:
Standard Grant
CyberTraining: Implementation: Small: Building Future Research Workforce in Trustworthy Artificial Intelligence (AI)
网络培训:实施:小型:建立可信赖人工智能 (AI) 领域的未来研究队伍
- 批准号:
2413654 - 财政年份:2023
- 资助金额:
$ 44.2万 - 项目类别:
Standard Grant
SaTC: EDU: Secure and Private Artificial Intelligence
SaTC:EDU:安全且私密的人工智能
- 批准号:
2054968 - 财政年份:2021
- 资助金额:
$ 44.2万 - 项目类别:
Continuing Grant
CyberTraining: Implementation: Small: Building Future Research Workforce in Trustworthy Artificial Intelligence (AI)
网络培训:实施:小型:建立可信赖人工智能 (AI) 领域的未来研究队伍
- 批准号:
2118083 - 财政年份:2021
- 资助金额:
$ 44.2万 - 项目类别:
Standard Grant
Building Cybersecurity Analytics Capacity in Big Data Era: Developing Hands-on Labs for Integrating Data Science into Cybersecurity Curriculum
建设大数据时代的网络安全分析能力:开发将数据科学融入网络安全课程的实践实验室
- 批准号:
2020636 - 财政年份:2020
- 资助金额:
$ 44.2万 - 项目类别:
Standard Grant
NSF Student Travel Grant for 2019 ACM Conference on Computer and Communications Security (ACM CCS)
2019 年 ACM 计算机和通信安全会议 (ACM CCS) 的 NSF 学生旅行补助金
- 批准号:
2001093 - 财政年份:2019
- 资助金额:
$ 44.2万 - 项目类别:
Standard Grant
NSF Student Travel Grant for 2019 ACM Conference on Computer and Communications Security (ACM CCS)
2019 年 ACM 计算机和通信安全会议 (ACM CCS) 的 NSF 学生旅行补助金
- 批准号:
1932911 - 财政年份:2019
- 资助金额:
$ 44.2万 - 项目类别:
Standard Grant
SaTC: CORE: Small: An Attribute-based Insider Threat Mitigation Framework
SaTC:核心:小型:基于属性的内部威胁缓解框架
- 批准号:
2006329 - 财政年份:2019
- 资助金额:
$ 44.2万 - 项目类别:
Standard Grant
NSF Student Travel Grant for 2018 ACM Conference on Computer and Communications Security (ACM CCS)
2018 年 ACM 计算机和通信安全会议 (ACM CCS) 的 NSF 学生旅行补助金
- 批准号:
1837755 - 财政年份:2018
- 资助金额:
$ 44.2万 - 项目类别:
Standard Grant
相似国自然基金
胆固醇羟化酶CH25H非酶活依赖性促进乙型肝炎病毒蛋白Core及Pre-core降解的分子机制研究
- 批准号:82371765
- 批准年份:2023
- 资助金额:50 万元
- 项目类别:面上项目
锕系元素5f-in-core的GTH赝势和基组的开发
- 批准号:22303037
- 批准年份:2023
- 资助金额:30 万元
- 项目类别:青年科学基金项目
基于合成致死策略搭建Core-matched前药共组装体克服肿瘤耐药的机制研究
- 批准号:
- 批准年份:2022
- 资助金额:52 万元
- 项目类别:
鼠伤寒沙门氏菌LPS core经由CD209/SphK1促进树突状细胞迁移加重炎症性肠病的机制研究
- 批准号:
- 批准年份:2022
- 资助金额:30 万元
- 项目类别:青年科学基金项目
基于外泌体精准调控的“核-壳”(core-shell)同步血管化骨组织工程策略的应用与机制探讨
- 批准号:
- 批准年份:2020
- 资助金额:55 万元
- 项目类别:
肌营养不良蛋白聚糖Core M3型甘露糖肽的精确制备及功能探索
- 批准号:92053110
- 批准年份:2020
- 资助金额:70.0 万元
- 项目类别:重大研究计划
Core-1-O型聚糖黏蛋白缺陷诱导胃炎发生并介导慢性胃炎向胃癌转化的分子机制研究
- 批准号:81902805
- 批准年份:2019
- 资助金额:20.5 万元
- 项目类别:青年科学基金项目
原始地球增生晚期的Core-merging大碰撞事件:地核增生、核幔平衡与核幔边界结构的新认识
- 批准号:41973063
- 批准年份:2019
- 资助金额:65.0 万元
- 项目类别:面上项目
CORDEX-CORE区域气候模拟与预估研讨会
- 批准号:41981240365
- 批准年份:2019
- 资助金额:1.5 万元
- 项目类别:国际(地区)合作与交流项目
RBM38通过协助Pol-ε结合、招募core调控HBV复制
- 批准号:31900138
- 批准年份:2019
- 资助金额:24.0 万元
- 项目类别:青年科学基金项目
相似海外基金
SaTC: CORE: Small: An evaluation framework and methodology to streamline Hardware Performance Counters as the next-generation malware detection system
SaTC:核心:小型:简化硬件性能计数器作为下一代恶意软件检测系统的评估框架和方法
- 批准号:
2327427 - 财政年份:2024
- 资助金额:
$ 44.2万 - 项目类别:
Continuing Grant
Collaborative Research: NSF-BSF: SaTC: CORE: Small: Detecting malware with machine learning models efficiently and reliably
协作研究:NSF-BSF:SaTC:核心:小型:利用机器学习模型高效可靠地检测恶意软件
- 批准号:
2338301 - 财政年份:2024
- 资助金额:
$ 44.2万 - 项目类别:
Continuing Grant
Collaborative Research: NSF-BSF: SaTC: CORE: Small: Detecting malware with machine learning models efficiently and reliably
协作研究:NSF-BSF:SaTC:核心:小型:利用机器学习模型高效可靠地检测恶意软件
- 批准号:
2338302 - 财政年份:2024
- 资助金额:
$ 44.2万 - 项目类别:
Continuing Grant
SaTC: CORE: Small: NSF-DST: Understanding Network Structure and Communication for Supporting Information Authenticity
SaTC:核心:小型:NSF-DST:了解支持信息真实性的网络结构和通信
- 批准号:
2343387 - 财政年份:2024
- 资助金额:
$ 44.2万 - 项目类别:
Standard Grant
NSF-NSERC: SaTC: CORE: Small: Managing Risks of AI-generated Code in the Software Supply Chain
NSF-NSERC:SaTC:核心:小型:管理软件供应链中人工智能生成代码的风险
- 批准号:
2341206 - 财政年份:2024
- 资助金额:
$ 44.2万 - 项目类别:
Standard Grant
Collaborative Research: SaTC: CORE: Small: Towards Secure and Trustworthy Tree Models
协作研究:SaTC:核心:小型:迈向安全可信的树模型
- 批准号:
2413046 - 财政年份:2024
- 资助金额:
$ 44.2万 - 项目类别:
Standard Grant
SaTC: CORE: Small: Study, Detection and Containment of Influence Campaigns
SaTC:核心:小型:影响力活动的研究、检测和遏制
- 批准号:
2321649 - 财政年份:2023
- 资助金额:
$ 44.2万 - 项目类别:
Standard Grant
SaTC: CORE: Small: Socio-Technical Approaches for Securing Cyber-Physical Systems from False Claim Attacks
SaTC:核心:小型:保护网络物理系统免受虚假声明攻击的社会技术方法
- 批准号:
2310470 - 财政年份:2023
- 资助金额:
$ 44.2万 - 项目类别:
Standard Grant
Collaborative Research: SaTC: CORE: Small: Investigation of Naming Space Hijacking Threat and Its Defense
协作研究:SaTC:核心:小型:命名空间劫持威胁及其防御的调查
- 批准号:
2317830 - 财政年份:2023
- 资助金额:
$ 44.2万 - 项目类别:
Continuing Grant
Collaborative Research: SaTC: CORE: Small: Towards a Privacy-Preserving Framework for Research on Private, Encrypted Social Networks
协作研究:SaTC:核心:小型:针对私有加密社交网络研究的隐私保护框架
- 批准号:
2318843 - 财政年份:2023
- 资助金额:
$ 44.2万 - 项目类别:
Continuing Grant