Student Travel Support for CSET 2009 Workshop

在可信计算征集中提到的主要领域之一是对所提议的系统的安全性进行评估。一种评估方法是通过试验台，如NSF赞助的Dester、Orbit和Geni系统。但拥有试验台只是评估过程的一部分，另一部分是运行可信和可信的实验。本研讨会的目的是研究如何创建和执行可信的与安全相关的实验。该研讨会名为网络实验和测试研讨会(CSET)，是可能继续下去的一系列研讨会中的第二个。国际和平研究所，也是研讨会的组织者，已经确定了三类实验，与：-规模：根据它们的性质，试验台永远不会有实验所需的资源，比如说，互联网规模的实验。因此，必须缩小实验规模，以反映试验台的大小。-多方性质：试验台正变得越来越分散，这影响了开展试验和解释结果的方法。-风险：安全实验通常涉及必须包含的危险代码(恶意软件)，并且必须确保不会危及试验台。研讨会将审议这些问题和其他基本问题。申请的资金将用于偿还研究生和本科生的费用。研讨会将于2009年8月10日与USENIX Security一起举行，USENIX Security是四大杰出的安全研究会议之一。

Among the major areas cited in the Trustworthy Computing Solicitation is theevaluation of the security of proposed systems. One approach to evaluation is through testbeds, such as the NSF-sponsored DETER, ORBIT, and GENI systems. But having a testbed is just one part of the evaluation process, the other being the running of believable and credible experiments. The purpose of this workshop is to deliberate on what it takes to create and execute believable experiments related to security. The workshop, called Workshop on Cyber Experimentation and Test (CSET) is the second in a series that is likely to continue. The PI, also the organizer of the workshop, has identified three classes of experiments, related to: - Scale: by their nature, testbeds will never have the resources needed for experiments that, say, are of Internet scale. So, the experiments must be scaled down to reflect the size of the testbed. - Multi-party nature: Testbeds are becoming increasingly decentralized, which impacts the approach to running experiments and to interpreting results. - Risk: Security experiments often involve dangerous code (malware) that must be contained and that must be guaranteed not to endanger the testbed. These and other fundamental issues will be deliberated on during the workshop. The funds requested would be used to reimburse the expenses of graduate and undergraduate students. The workshop is to take place on Aug. 10, 2009, in conjunction with USENIX Security, one of the four preeminent security research conferences.