Network security with automatic mitigation of disruptive traffic, attack containment, and intrusion detection

随着基于计算机网络的新的强大而成熟的技术的出现和大规模采用，新的安全威胁正在浮出水面，需要妥善解决。这项研究计划致力于设计强大的网络安全系统，以应对当前和未来的威胁，例如恶意软件攻击和由于滥用网络服务而造成的网络拥堵。重点是打击巧妙制作的攻击，如多态或加密(隐藏)的恶意代码，减轻破坏性流量，以及检测秘密通信通道。该研究计划的一个主要组成部分是设计有效的隐蔽通道，用于在无线环境中对移动设备(例如笔记本电脑、智能手机)进行身份验证。该计划的一个重要组成部分包括合成网络活动，以便通过多模式渠道向人类有效地传达相关信息，包括结合有效的入侵检测和缓解系统的有意义的声音。

With the emergence and massive adoption of new powerful and proficient technologies based on computer networks, new security threats are surfacing, and they need to be properly addressed. This research program pursues the design of robust network security systems that cope with current and future threats, such as malicious software attacks and network congestion due to abusive use of network services. Emphasis is focused on combating cleverly crafted attacks such as polymorphic or encrypted (concealed) malicious code, mitigating disruptive traffic, and detecting secret communication channels. A main component of this research program consists of designing effective covert channels for authentication of mobile devices (e.g., laptops, smart phones) in wireless environments. A foremost component of this program consists of synthesizing network activity to effectively convey relevant information to humans by the means of multimodal channels, including meaningful sounds coupled with efficient intrusion detection and mitigation systems.