CT-ISG: Dartmouth Trace Sanitization Framework

美国国家科学基金会网络信任计划提案编号：0831409主要研究者：大卫科茨机构：达特茅斯学院提案标题：CT-ISG：达特茅斯痕迹清理框架项目摘要当研究人员能够分析实时计算机网络的活动时，计算机网络研究的进展会更快。 由于很难从生产计算机网络中收集流量跟踪，因此网络研究社区共享跟踪至关重要。当然，捕获网络跟踪并希望共享它们的研究人员必须正确地“消毒”跟踪以删除敏感信息。消毒总是涉及消毒有效性（为网络用户提供匿名性和网络操作信息的保密性）和研究有用性（因为只有保留的信息才能被研究人员使用）之间具有挑战性的权衡。该项目旨在通过更安全、更容易地清理网络跟踪来增加网络跟踪共享。 为此，该项目将开发和发布NetSANI（网络跟踪清理和分析基础设施），这是一套灵活且可扩展的软件工具，用于根据用户指定的清理目标和用户指定的研究目标清理网络跟踪。 这些工具将在达特茅斯学院收集的大量痕迹上进行验证，并通过向外部合作者提供早期版本进行评估，这些合作者将在他们的痕迹上测试这些工具。NetSANI项目将产生广泛的学术和实际影响：（a）更好的工具将能够实现并鼓励更多的网络跟踪共享，这有助于研究界进行更好的研究;（B）更好地获取网络跟踪将有助于公司开发更好的网络产品;（c）更好的匿名化方法将保护网络用户的隐私。 推广工作将有助于激励研究界定义痕量消毒的规范和最佳实践。 最后，该项目将让研究生和本科生参与研究，并将研究成果纳入课程。

National Science FoundationNSF Cyber Trust ProgramProposal Number: 0831409Principal Investigator: David KotzInstitution: Dartmouth CollegeProposal Title: CT-ISG: Dartmouth Trace Sanitization Framework Project SummaryComputer-network research advances more quickly when researchers are able to analyze the activity of live computer networks. Because it is difficult to collect traffic traces from production computer networks, it is critical for the network-research community to share traces. Researchers who capture network traces and wish to share them, of course, must properly "sanitize" the trace to remove sensitive information. Sanitization always involves a challenging trade-off between sanitization effectiveness (providing anonymity for network users and secrecy for network operational information) and research usefulness (since only the information retained can be used by the researcher). This project aims to increase network-trace sharing by making it safer and easier to sanitize network traces. To this end, the project will develop and release NetSANI (Network Trace Sanitization and ANonymization Infrastructure), a flexible and extensible suite of software tools for sanitizing network traces, based on user-specified sanitization goals and user-specified research goals. The tools will be verified on extensive traces collected at Dartmouth College, and evaluated by providing early releases to external collaborators who will test the tools on their traces. The NetSANI project will have broad academic and practical impact: (a) better tools will enable and encourage more network-trace sharing, which helps the research community do better research, (b) better access to network traces will help companies develop better network products, and (c) better anonymization methods will protect network users' privacy. The outreach efforts will help spur the research community into defining norms and best practices for trace sanitization. Finally, the project will involve graduate and undergraduate students in research and incorporate research results in courses.