II-EN: A Real-Time Lens into Dark Space of the Internet

网络望远镜可以观察发送到非指定地址空间的未经请求的互联网流量，是少数几种可以让全球范围内的安全相关事件可见的仪器之一。CAIDA的研究人员正在扩展他们的望远镜仪器，使研究人员能够利用这一独特的全球数据源，并提高我们对大规模攻击和恶意软件传播等安全相关事件的理解。网络监控的这一创新性转变解决了网络流量研究中的几个普遍挑战：收集和存储、有效的策展以及大规模数据的隐私保护共享。CAIDA研究人员正在开发一种观察到的流量分类，包括DoS攻击、漏洞扫描和恶意软件传播的类别。 苏查分类法有助于实时检测事件，这些事件值得更全面的测量和分析，并通知感兴趣的研究人员。该项目还将使基础设施的审查研究人员运行分析程序后约一小时收集。CAIDA开发了一个隐私敏感的数据共享框架，将隐私增强技术与数据寻求者和数据提供者的经验证的标准隐私原则和义务相结合。该项目的结果将有助于制定早期检测、反应和缓解战略，支持全球打击普遍存在的恶意软件。 用望远镜数据样本制作教育数据包将把这项研究与教育成果联系起来。 最重要的是，该项目提供了方便的远程访问大量的数据，计算资源和互联网专业知识，旨在支持网络安全研究。

Network telescopes, which observe unsolicited Internet traffic sent tounassigned address space, are one of the few types of instrumentationthat allow global visibility into a wide range of security-related events.CAIDA researchers are expanding their telescope instrumentation to enableresearchers to exploit this unique global data source and improve ourunderstanding of security-related events such as large-scale attacks andmalware spread. This innovative shift in network monitoring addressessevearal pervasive challenges in network traffic research: collectionand storage, efficient curation, and privacy-protected sharing of largevolumes of data.CAIDA researchers are developing a taxonomy of observed traffic, includingclasses of DoS attacks, vulnerability scans, and malware spread. Sucha taxonomy facilitates real-time detection of events that merit morecomprehensive measurement and analysis and notification of interestedresearchers. This project will also enable infrastructure for vettedresearchers to run analysis programs approximately one hour after datacollection. CAIDA has developed a privacy-sensitive data sharing frameworkthat integrates privacy-enhancing technology with proven and standardprivacy principles and obligations of data seekers and data providers.The results of this project will contribute to developing early detection,reaction and mitigation strategies supporting the global fight againstpervasive malware. Creation of educational data kits out of telescopedata samples will link this research to educational outcomes. Mostimportantly, this project provides convenient remote access to a wealthof data, computing resources and Internet expertise aimed at supportingnetwork security research.