TC: EAGER: Investigations of Next-generation Network Reconnaissance Attack Techniques and Limitations

该项目的目标是研究下一代网络攻击侦察技术，并探索现有防御的局限性。这项调查的结果提供了对网络侦察攻击中潜在的游戏规则改变的理解，以及它们如何发展，以便能够快速安全地发现和导航网络。该项目特别探索了新的扫描技术，通过智能主动探测远程发现防火墙安全策略，而无需探测终端主机。这个项目的结果，如果成功，预计将提供变革性的观点，网络防御，特别是反扫描技术，超越传统的入侵检测/防御系统。由于这种前瞻性的EAGER提议显示出高风险，它也需要高价值，即始终领先于攻击者许多步骤。这项研究引起了人们对安全配置的隐私性和现有对抗未来高级攻击的有效性的严重关注。拟议的研究议程可能会使研究人员和供应商考虑超越当前入侵防御系统和入侵防御系统的全新防御概念。该项目还促进了下一代网络攻击的理论化和预测。

This goal of this project is to investigate next-generation network attack reconnaissance techniques, and explore the limitation for existing defenses. The result of this investigation offers understanding of potential game-changing in network reconnaissance attacks and how they can evolve in order to enable discovering and navigating the network quickly and safely. The project particularly explores novel scanning techniques to discover firewall security polices remotely via intelligent active probing, and without probing the end-hosts. The outcome of this project, if successful, is expected to offer transformative views to network defense, particularly counter-scanning techniques, beyond traditional intrusion detection/prevention systems. As this far-forward looking EAGER proposal exhibits high-risk, it also entails high-value that is to be always many steps ahead of attackers.This research arises serious concerns about the privacy of security configuration and the effectiveness of existing counter-measures against future advanced attacks. The proposed research agenda may make researchersas well as vendors consider fundamentally new defense concepts beyond the current IDS and IPS.This project also stimulates theorizing and predicting next-generation network attacks.