Mid-scale RI-1 (M1:DP): Designing a global measurement infrastructure to improve Internet security

虽然互联网已成为渗透到现代社会各个方面的重要基础设施，但其安全性和可信赖性不断受到威胁和攻击。任何企业或服务的流量都可能被转移到试图模仿合法站点、窃取用户凭据、破坏安全性或欺骗用户的伪装站点。互联网基础设施的安全性是安全研究社区的一个高度优先事项，但该社区因缺乏相关数据而受到极大阻碍。该项目的目标是为变革性基础设施提供一个经过验证的设计，以支持数据的收集、管理、归档和扩展共享，这些数据是推进有关互联网基础设施安全性、稳定性和弹性的关键科学研究所需的。度量基础设施设计工作将集中于Internet传输层：路由、域名命名、寻址和密钥管理（证书颁发机构）。社区研讨会和交互式原型工作将能够评估测量基础设施的建议设计，以在宏观尺度上获取和共享此类安全相关数据。由于结果数据的复杂性、数量和敏感性，该设计将涵盖数据管理的许多方面：管理、后处理分析、保护隐私的数据分析框架、数据发现和可访问性，以及规范化的数据共享协议。为了支持原型的使用和反馈，pi将开发网络基础设施数据科学在线课程，这将促进负责任的（道德的，尊重隐私的）使用数据集和分析，以及STEM/网络安全劳动力培训。该设计项目将使数据密集型方法能够应用于全球互联网基础设施的数据，克服科学和工程进步的关键障碍，以应对当前和未来互联网相关危害。该项目将为目前依赖于互联网数据的广泛学科做出贡献，包括网络科学、社会经济研究、国际关系和政治学。由此产生的支持数据采集、管理和共享的能力将对研究社区产生内在的平衡效应。此外，如果成功的话，这种网络基础设施将增加美国公民对互联网的信任度，并为世界其他地区树立榜样。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

While the Internet has become critical infrastructure permeating all aspects of modern society, its security and trustworthy character are subject to constant threats and attacks. Any enterprise or service can have its traffic deflected to a masquerading site that attempts to mimic the legitimate site, steal user credentials, disrupt security, or defraud users. The security of the Internet infrastructure is a high priority for the security research community, but that community is greatly hindered by a lack of relevant data. The goal of this project is a validated design for a transformative infrastructure to support collection, curation, archiving, and expanded sharing of data needed to advance critical and stunted scientific research on the security, stability, and resilience of Internet infrastructure.The measurement infrastructure design effort will focus on the Internet transport layer: routing, domain naming, addressing, and key management (the Certificate Authorities). Community workshops and interactive prototyping efforts will enable evaluation of a proposed design of a measurement infrastructure to acquire and share such security-relevant data at a macroscopic scale. Due to the complexity, volume, and sensitivity of resulting data, the design will cover many facets of data management: curation, post-processing analytics, privacy preserving data analysis frameworks, data discovery and accessibility, and normalized data sharing agreements. To support use of and feedback on prototypes, the PIs will develop an on-line course on Network Infrastructure Data Science, that will facilitate responsible (ethical, privacy-respecting) use of the datasets and analytics, and STEM/cybersecurity workforce training. This design project will enable the application of data-intensive methods to data from the global Internet infrastructure, overcoming a key barrier to scientific and engineering advances to navigate current and future Internet-related harms. The project will contribute to a broad range of disciplines that now depend on data about the Internet, including network science, socioeconomic studies, international relations, and political science. The resulting capabilities to support data acquisition, curation, and sharing will have an inherent equalizing effect on the research community. Moreover, if successful, this cyberinfrastructure will increase the trustworthiness of the Internet for U.S. citizens, and serve as a model for rest of the world.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.