CyberTrust Center: Security Through Interaction Modeling (STIM)

提案编号：NSF-0433540标题：通过交互建模(STIM)实现安全性PI：Michael Reiterter在特定情况下，计算机的误用通常比一般情况下更容易识别，并且对经验和上下文高度敏感。然而，如果有的话，很少有计算机安全技术充分利用经验和背景模型来防御滥用。这项研究探讨了这样一个论点，即通过以一种允许模型成为防御系统的不可或缺的元素的方式来建模经验和上下文，许多计算机防御可以在有效性和可用性方面得到显著改进。可以建模并可能被利用的交互是无处不在的-它们存在于人之间(例如，访问控制中的不同用户角色)、计算机和网络之间(例如，什么计算机和网络通常对应于什么其他计算机和网络)，甚至存在于攻击之间(例如，什么攻击实现了他人的前提条件)。开发更好地利用此类交互的安全技术构成了“通过交互建模实现安全”(STIM)研究议程的核心。这一努力有望在不同的安全技术领域取得进展，例如攻击流量过滤、更可用的授权系统以及入侵检测和响应。STIM活动的一个中心目标是教育和外联。它在这里的努力包括建立一个安全教育门户网站，并为从儿童到大学教师的许多教育级别提供网络安全课程。

Proposal Number: NSF-0433540Title: Security Through Interaction Modeling (STIM)PI: Michael ReiterComputer misuse is often easier to recognize in particular instances than it is to specify in general, and is highly sensitive to experience and context. Nevertheless, few computer security technologies, if any, adequately utilize models of experience and context in defending against misuse. This research explores the thesis that many computer defenses can be dramatically improved, in both efficacy and usability, by modeling experience and context in a way that allows the models to become an integral element for defending the system. The interactions that can be modeled and potentially exploited are ubiquitous---they exist among persons (e.g., different user roles in access control), among computers and networks (e.g., what computers and networks typically correspond with what others), and even among attacks (e.g., what attacks realize the preconditions of others). Developing security technologies that better utilize such interactions forms the core of the research agenda in "security through interaction modeling" (STIM). This effort promises advances in diverse areas of security technology, such as attack traffic filtering, more usable authorization systems, and intrusion detection and response. A central goal of the STIM activity is education and outreach. Its efforts here include the construction of a security education portal and cybersecurity curricula for many education levels, ranging from children through college faculty.