CT-ISG: Population Studies in Computer Security via DNS Monitoring

该项目旨在了解和分析网络安全威胁和解决方案的全球人口统计数据。它的结构是一项人口研究，分为三个主要部分。首先，实时监控基础设施捕获有关恶意软件和安全工具的人口特征的新数据集，因为它们实际上在世界各地都存在。监控基础设施可以以不损害终端用户隐私的方式，对识别的一组在线站点上的各种识别的软件程序(恶意的和保护性的)的流行度进行频繁的统计估计。其次，对数据进行分析以获得洞察力，以推动网络安全的增强。例如，分析可以寻找恶意软件流行率与其他因素之间的关联，例如站点特征和保护软件的使用，并控制各种因素。第三，数据集将以原始和经过处理的形式在网上发布，以便在计算机安全和其他一系列领域进行进一步研究，同时教育广大公众有关网络安全威胁的知识。

This project seeks to understand and analyze the global demography of cybersecurity threats and solutions. It is structured as a population study, in three majors parts. First, a real time monitoring infrastructure captures a new dataset on the population characteristics of malicious software, and of security tools, as they are actually found across the world. The monitoring infrastructure can compile frequent statistical estimates of the prevalence of various identified software programs, both malicious and protective, at an identified set of online sites, in a manner that does not compromise the privacy of end users. Second, the data is analyzed for insight to drive enhancements in cybersecurity. For example, analyses can look for correlations between malware prevalence and other factors such as site characteristics and the use of protective software, controlling for various factors. Third, the data set is to be published online in both raw and processed forms, to allow further research across computer security and a range of other fields, while at the same time educating the public at large about cybersecurity threats.