CCollaborative Research: CT-M: Beyond Testbeds-Catalyzing Transformative Research and Education through Cybersecurity Collaboratories (BTCT)

实验性的网络安全研究本质上是有风险的。实验可能涉及发布实时恶意软件代码、运行僵尸网络或创造高度破坏性的网络条件。在复制攻击时需要现实主义，以便对拟议的防御进行彻底测试，并预测未来的攻击。在解决智力优势方面，这项提议寻求开发一种独特的高风险实验管理模式；使研究人员能够进行与其更大环境相互作用的实验，同时保持控制和安全。这里提出的模型基于一个非常简单的推理：如果实验的行为是完全不受约束的，那么宿主环境的行为一定是完全受限的，因为它不能假设关于实验的任何东西；但是，如果实验的行为以某种特定和精心选择的一种或多种方式受到约束，那么宿主试验台的行为可以不那么约束，因为实验和环境约束的组合一起可以提供良好行为所需的总体保证。这种模式的主要好处是，实验者和实验台操作员都可以放心地进行之前无法支持的广泛而有趣的实验。最终目标是开发该模型的实现和形式化，包括推理实验和试验台约束组合的逻辑工具(更广泛的影响)。初步工作将在威慑设施和类似的基于Emulab的测试平台中开发支持该模型的机制。专家小组成员审查了该提案，并收到了一个非常好、一个非常好/很好和一个很好的建议。小组成员认为提案的所有三个要素(风险实验支持、动态健康监测和试验床联邦)都代表了对该领域的贡献，其中最有价值的领域是风险实验支持。总体来说，专家小组希望看到一个更有力的理由，从总体上改善现有的安全试验台，特别是与研究人员目前对威慑试验台的使用和需求相结合。小组成员承认该团队完全有资格从事这项工作。如果成功，这些活动被视为推进了网络安全实验设施的最先进水平。

Experimental cybersecurity research is inherently risky. An experiment may involve releasing live malware code, operating a botnet, or creating highly disruptive network conditions. Realism is required in replicating attacks so that proposed defenses can be thoroughly tested and future attacks anticipated. This proposal, in addressing intellectual merit, seeks to develop a unique model for risky experiment management; enabling researchers to carry out experiments that interact with their larger environment while retaining both control and safety. The model forwarded here is based on a very simple line of reasoning: If the behavior of an experiment is completely unconstrained, the behavior of the host environment must be completely constraining, because it can assume nothing about the experiment; but, if the behavior of the experiment is constrained in some particular and well-chosen way or ways, the behavior of the host testbed can be less constraining, because the combination of experiment and environment constraints together can provide the required overall assurance of good behavior. The key benefit of this model is that both experimenter and testbed operator can proceed with assurance in carrying out a wide and interesting range of previously unsupportable experiments. The ultimate goal is to develop both implementation and formalization of this model, including logical tools to reason about experiment and testbed constraint composition (broader impact). Initial work will develop mechanisms to support the model in the DETER facility and similar Emulab-based testbeds.The proposal was reviewed by panelists and received one Very Good, one Very Good/Good and one Good. Panelists viewed all three elements of the proposal (risky experimentation support, dynamic health monitoring, and federation of testbeds) to represent contributions to the field, with the most valuable area of the three being risky experimentation support. The panel overall wanted to see a stronger case made for improving existing security testbeds in general, and particularly a tie in with current uses and needs of the DETER testbed by researchers. Panelists recognized the team as being well qualified for the work. If successful, the activities were viewed as advancing the state-of-the-art in experimental facilities for cybersecurity.