CyberTrust Center: Security Through Interaction Modeling (STIM)

提案编号：NSF-0433540标题：通过交互建模的安全性（STIM）PI：Michael Reiter计算机误用在特定情况下通常比一般情况下更容易识别，并且对经验和上下文高度敏感。 然而，很少有计算机安全技术（如果有的话）充分利用经验和背景模型来防止滥用。 本研究探讨的论文，许多计算机防御可以显着提高，在效率和可用性，通过建模的经验和上下文的方式，使模型成为一个不可分割的元素，为保卫系统。 可以建模和潜在利用的交互是无处不在的-它们存在于人与人之间（例如，访问控制中的不同用户角色），在计算机和网络之间（例如，哪些计算机和网络通常与其他计算机和网络对应），甚至在攻击中（例如，什么攻击实现了其他人的先决条件）。 开发更好地利用这种交互的安全技术是“通过交互建模实现安全”（STIM）研究议程的核心。 这一努力有望在安全技术的各个领域取得进展，例如攻击流量过滤、更可用的授权系统以及入侵检测和响应。 科学、技术和创新管理活动的一个中心目标是教育和推广。 它在这方面的努力包括为从儿童到大学教师的许多教育级别构建安全教育门户和网络安全课程。

Proposal Number: NSF-0433540Title: Security Through Interaction Modeling (STIM)PI: Michael ReiterComputer misuse is often easier to recognize in particular instances than it is to specify in general, and is highly sensitive to experience and context. Nevertheless, few computer security technologies, if any, adequately utilize models of experience and context in defending against misuse. This research explores the thesis that many computer defenses can be dramatically improved, in both efficacy and usability, by modeling experience and context in a way that allows the models to become an integral element for defending the system. The interactions that can be modeled and potentially exploited are ubiquitous---they exist among persons (e.g., different user roles in access control), among computers and networks (e.g., what computers and networks typically correspond with what others), and even among attacks (e.g., what attacks realize the preconditions of others). Developing security technologies that better utilize such interactions forms the core of the research agenda in "security through interaction modeling" (STIM). This effort promises advances in diverse areas of security technology, such as attack traffic filtering, more usable authorization systems, and intrusion detection and response. A central goal of the STIM activity is education and outreach. Its efforts here include the construction of a security education portal and cybersecurity curricula for many education levels, ranging from children through college faculty.