CT-M: Meta-Environments for Experiments on Diverse Topics in Network Security

提案编号：0831427PI: Paul barford机构：威斯康星大学麦迪逊分校标题：CT-M：网络安全中不同主题实验的元环境摘要：为了解决互联网中恶意活动的多样性，复杂性和数量的持续升级，需要对下一代安全系统和技术进行系统测试和评估的新方法。本研究的目的是为基于emulab的测试平台调查和开发元环境。Ameta-environment是一组为特定安全领域开发的测试平台配置、工具和流程，使实验能够以简化、现实和一致的方式进行。该研究计划的第一个组成部分侧重于调查可以在所有元环境中使用的工具，例如流量生成器。接下来，将针对以下领域调查和开发五个特定的元环境：1)网络入侵检测，2)防火墙，3)蜜网，4)拒绝服务防御，以及5)安全边界设计。最后，威斯康星高级互联网实验室、威慑和其他基于仿真的测试平台之间的联合机制将被研究，以实现大规模实验和对资源的透明访问。这个项目更广泛的影响是，它将简化和加速安全研究测试平台的使用，并使新的安全系统和工具之间的一致性比较成为可能。这项工作的预期结果包括五个元环境和测试平台联合功能的工具、配置和文档。该项目还包括教育和推广活动，将开发网络安全实验室练习材料。这些基于网络的材料将对社区开放，并将强调实践方法，旨在为学生提供实用的相关经验。

Proposal Number: 0831427PI: Paul BarfordInstitution: University of Wisconsin - MadisonTitle: CT-M: Meta-Environments for Experiments on Diverse Topics in NetworkSecurityAbstractIn order to address the continued escalation in the diversity, sophistication and quantity ofmalicious activity in the Internet, new methods for systematic testing and evaluation ofnext generation security systems and techniques are required. The objective of thisresearch is to investigate and develop meta-environments for Emulab-based testbeds. Ameta-environment is a set of testbed configurations, tools and processes developed for aspecific security domain that enables experiments to be conducted in a simplified,realistic and consistent fashion. The first component of this research program is focusedon investigating tools such as traffic generators that can be used across all metaenvironments.Next, five specific meta-environments will be investigated and developedfor the following areas: 1) network intrusion detection, 2) firewalls, 3) honeynets, 4)denial of service defense, and 5) security perimeter design. Finally, mechanisms forfederation between the Wisconsin Advanced Internet Lab, DETER and other Emulabbasedtestbeds that will enable large-scale experiments and transparent access toresources will be investigated. The broader impacts of this project are that it willsimplify and accelerate the use of testbeds for security research, and enable consistentcomparisons between new security systems and tools. The expected results of this workinclude tools, configurations, and documentation for the five meta-environments andtestbed federation capability. The project also includes education and outreach activitiesthat will develop network security lab exercise materials. These web-based materials willbe openly available to the community, and will emphasize a hands-on approach intendedto provide students with practical, relevant experiences.