Long-Range Active Collaborative Environment (LACE)

该项目正在推进网络安全和网络研究人员可用的实验工具和方法的范围、有效性、影响和科学严谨性。支撑该项目的，并形成第二个目标，是在美国和日本建立一个新的国际，跨学科的研究人员社区，利用个人合作者的共同愿景和互补优势以及各自的研究文化。这项工作包括设计和实现一个联邦系统集成USC/ISI？威慑和JAIST？StarBED研究试验台。在关键要素中，先进的实验描述语言的开发建立在当前的DETER和StarBED能力之上，以支持有关实验配置、工作流程和有效性的高级推理，同时研究用于控制极其复杂实验的新用户界面方法，利用StartBED？s kuroyuri程序模型和DETER？s SEER声明性模型。因为这项工作是在DETER？根据现有的联邦架构，该设施的用户还可以访问其他合作基础设施，如GENI。还包括一系列催化剂研究任务，作为基础设施的激励因素，同时为未来的网络提供价值。其中一项任务侧重于通过在Internet中创建符合策略的动态回退路径来改进Internet路由的健壮性和动态错误恢复。s域间路由协议BGP。另一项任务是通过健壮的计划外密钥更新来解决安全域名系统（DNS）部署面临的重大挑战。每个任务都利用了多个项目合作者之前的研究，每个任务都对新的实验设施提出了重大挑战。

This project is advancing the scope, effectiveness, impact, and scientific rigor of experimental tools and methodologies available to researchers in cybersecurity and networking. Underpinning the project, and forming a second objective, is the creation of a new international, inter-disciplinary community of researchers in the United States and Japan that leverages the shared vision and complementary strengths of the individual collaborators and their respective research cultures. The work includes design and implementation of a federated system integrating USC/ISI?s DETER and JAIST?s StarBED research testbeds. Among key elements, the development of an advanced experiment description language builds on current DETER and StarBED capabilities to support higher-level reasoning about experiment configuration, workflow and validity, while research into new user interface approaches for controlling extremely complex experiments leverages StartBED?s kuroyuri procedural model and DETER?s SEER declarative model. Because this work is carried out in the context of DETER?s existing federation architecture, users of the facility will additionally gain access to other DETER cooperating infrastructures such as GENI.Also included is a series of catalyst research tasks, designed as motivators for the infrastructure while providing value to future networks. One task is focusing on improving the robustness and dynamic error recovery of Internet routing by creating dynamic policy-conformant fallback paths within the Internet?s interdomain routing protocol, BGP. The other task is addressing a significant challenge to the deployment of a secure Domain Name System (DNS) through robust unscheduled rekeying. Each task leverages previous research by multiple project collaborators, and each poses significant challenges to the new experimental facility.