MRI: Acquisition of an Online Banking System for Information Assurance Research

提案#：11-23220PI(S)：徐殿祥；泡利，约书亚；涂，迈克尔机构：达科他州立大学标题：mri/acq.：用于信息保障研究的网上银行系统项目建议：该项目来自EPSCoR国家，旨在获得硬件和软件以创建一个银行试验台，以探索银行系统的计算机安全问题，增强全球银行基础设施的安全研究的未来。虽然网上银行使管理金融活动变得更加方便，但安全威胁正变得更加严重，因为随着移动和无线设备的使用越来越多，资金存储在不可信的互联网环境中并在其周围移动。拟议的收购将促进各种活动，以促进银行业的信息保证研究和教育。南达科他州拟议的网上银行系统在安全方面支持以下研究项目：-威胁建模和验证，旨在具有证明/反证明能力的严格技术，-安全测试，旨在具有成本效益的自动化安全测试，-威胁模型，-法医准备，旨在更好地调查入侵和欺诈，以及-安全需求分析，旨在一致和可测试的规范。工作建立了一个灵活的研究工具，用于国家的关键要素-S金融基础设施。由网上银行系统引发的研究将为网上银行应用的防御带来新的深入技术。广泛的影响：这一工具增加了S大学进行网上银行安全前沿研究的能力。网上银行系统扩大了新的国家金融基础设施保护中心的关键基础设施。它还通过为信息保障和安全领域的NSF REU(本科生研究体验)网站提供丰富的研究主题，扩大了学生对研究的参与，该网站侧重于招收少数族裔学生。在培训下一代劳动力方面，通过改进信息保障课程，预计将产生深远的影响。拟议的系统将通过与美国国家科学基金会的GK-12网络安全研究员项目合作，在8所高中的计算机课堂上教授网络安全。其中两所学校主要为美洲原住民服务。最后，该工具提高了EPSCoR状态下的博士产量，巩固了S在网上银行研究中的地位。

Proposal #: 11-23220PI(s): Xu, Dianxiang; Pauli, Joshua; Tu, MichaelInstitution: Dakota State UniversityTitle: MRI/Acq.: Online Banking System for Information Assurance ResearchProject Proposed:This project from an EPSCoR state, aiming to acquire hardware and software to create a banking testbed to explore issues of computer security of banking systems, enhances the future of security research for the global banking infrastructure. While online banking makes it more convenient to manage financial activities, security threats are becoming even greater because the money is stored on and moved around an untrustworthy Internet environment with increasing use of mobile, wireless devices. The proposed acquisition will enable various activities for promoting information assurance research and education in the banking sector. The proposed online banking system for South Dakota enables the following research projects in security:- Threat modeling and verification, aiming at a rigorous techniques with proof /disproof capability,- Security testing, aiming at cost-effective, automated security testing with threat models,- Forensic readiness, aiming at better investigation of intrusions and frauds, and- Security requirements analysis, aiming at consistent and testable specification.The work establishes a flexible research instrument for a key element of the nation?s financial infrastructure. The research enabled by the online banking system will lead to novel techniques for the defense, in-depth, of online banking applications.Broader Impacts: This instrumentation increases DSU?s capacity to conduct cutting-edge research on online banking security. The online banking system expands critical infrastructure in the new National Center for the Protection of the Financial Infrastructure. It also broadens the participation of students in research by providing a rich variety of research topics for the NSF REU (Research Experience for Undergraduate) Site in Information Assurance and Security, which places emphasis on recruitment of minority students. In terms of training the next generation workforce, far-reaching impacts are envisioned through improvements to the information assurance curriculum. The proposed system will be used to teach cyber security in computer classes at eight high schools through collaboration with the NSF project ?GK-12 Fellows in Cyber Security?. Two of these schools serve mainly Native-Americans. Finally, the instrument enhances PhD production in an EPSCoR state and solidifies DSU?s position in online banking research.