CyReSE: Cyber Security Research Software Engineering

CSIT研究人员和更广泛的网络安全研究社区显然需要RSE支持，以开发用于推动研究和潜在成果商业化的软件。该提案将支持一个基于软件的物联网攻击缓解方法的关键研究项目。它将建立一个新颖的物联网试验台，包括一组故意易受攻击的蜜罐(蜜网)，以吸引最新的攻击进行分析，以及消费设备，以测试基于处理器级软件的威胁缓解。该试验台还将用于与伦敦大学学院在基于物联网的技术滥用方面进行多学科合作。此外，我将为三个现有的研究小组提供RSE支持：CSIT蓬勃发展的软件定义网络(SDN)-网络功能虚拟化(NFV)研究小组将受益于一个专门的RSE来推动研究领域的创新，在这些领域，软件正在取代传统的基于硬件的方法。我还将为ICS安全研究小组支持软件驱动的研究框架，调查针对关键国家基础设施的攻击。恶意软件研究小组调查基于动态汇编语言的人工智能模型的恶意软件检测，将得到新的软件框架的支持，以获得关于新出现的威胁的研究数据，包括无文件、预期进程和基于浏览器的攻击。这些独立的设施将连接到CSIT Cyber Range，这是一个GB 500k的培训和测试设施，可以模拟真实世界的部署模型，并进行攻防战略练习。作为一名专门的RSE，我将在管理CSIT研究产生的研究软件人工制品方面发挥核心和一致的作用，包括源代码、文档和数据集。这将通过开发网络应用程序来管理研究代码和数据，确保研究成果的可重复性、可复制性和可保证性，予以支持。这项提议的一个关键目标是在大学内部建立RSE，将RSE作为一条吸引和留住高水平工程师的职业道路。这有可能成为北爱尔兰(NI)第一个RSE分会的核心。将投入大量时间在大学内部和外部开展外联和公民活动，以满足研究软件工程师学会和研究基金的目标。

There is a clear need among CSIT researchers, and the wider cyber security research community, for RSE support to develop software for driving research and potential commercialisation of results. This proposal will support a key research project into software-based approaches for IoT attack mitigation. It will establish a novel IoT testbed, including a set of intentionally vulnerable honeypots (a honeynet) to attract the latest attacks for analysis, and consumer devices to test processor-level software-based mitigations to threats. This testbed will also be employed for multi-disciplinary collaboration with University College London into IoT-based tech-abuse. Further I will provide RSE support to three existing research groups: CSIT's thriving Software-Defined Networking (SDN)-Network Function Virtualization (NFV) research group would benefit from a dedicated RSE to drive innovation in research areas where software is replacing traditional hardware-based approaches. I will also support software-driven research frameworks for the ICS security research group, investigating attacks on Critical National Infrastructure. The Malware research group, investigating malware detection by AI models built on dynamic assembly language, will be supported with novel software frameworks to derive research data on emerging threats, including fileless, expected-process and browser-based attacks. These stand-alone facilities will be connected to the CSIT Cyber Range, a £500k training and testing facility that enables simulation of real-world deployment models, and practice in attack and defence strategies. As a dedicated RSE, I will provide a central and consistent role in managing research software artefacts arising from CSIT's research, including the source code, documentation and datasets. This will be supported through the development of web applications to manage research code and data, ensuring the reproducibility, replicability and assurance of research outcomes. A key aim of this proposal is to establish an RSE presence within the university, promoting RSE as a career pathway to attract and retain high level engineers. This has the potential to be the nucleus of the first RSE Chapter in Northern Ireland (NI). Significant time will be committed to outreach and citizenship activities, both within the university and externally, meeting aims of the Society of Research Software Engineers, and of the Fellowship.