TC: Medium: Collaborative Research: Wide-Aperture Traffic Analysis for Internet Security

TC：媒介：协作研究：互联网安全的大孔径流量分析

• 批准号: 0905186
• 负责人: Paul Barford
• 金额: $ 40万
• 依托单位: University of Wisconsin-Madison
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2009
• 资助国家: 美国
• 起止时间: 2009-09-01 至 2014-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0905186&HistoricalAwards=false
• 关键词: TC; Medium; Collaborative; Research; Wide

TC: Medium: Collaborative Research: Wide-Aperture Traffic Analysis for Internet SecurityAmong emerging network threats, some of the most pernicious and elusive are stealthy attacks that take place at very low rates and in a targeted fashion. This project is developing methods for identifying malicious and unwanted activity in the Internet -- specifically, traffic that is low-volume and well "hidden'' among normal traffic. The approach being taken is to develop new methods for direct analysis of Internet traffic of unprecedented scope and scale. In particular, the project is designing and implementing a system that leverages high-performance cluster computing to allow application of sophisticated pattern analysis and machine learning algorithms to network traffic at the packet and flow level.An organizing principle of the system is its decomposition into data-parallel "lenses'' and more computationally challenging "pattern analysis'' components. The project is investigating the application of this architecture to dark address monitoring in traffic from core networks -- a capability that has not been possible to date.The end result of this project will be a set of tools and a running system that may be used by researchers to enable new investigations into traffic analysis, and may be used by network operators on an ongoing basis to help protect their networks.

TC：媒介：协作研究：用于Internet SecurityAmong新兴网络威胁的广泛流量分析，一些最有害和难以捉摸的是以非常低的速度和有针对性的方式进行的隐秘攻击。该项目正在开发用于识别互联网中恶意和不必要活动的方法 - 特别是，流量且在正常流量中“隐藏”的流量“隐藏”。采用的方法是开发新的方法来直接分析互联网流量的新方法，尤其是范围的范围和规模。特别是，该项目正在设计和实施高度分析的系统，以实现高度计算的计算机，并实现了计算的系统，并实现了计算机的群体，并实现了计算机的群体，并实现了计算机的群体，并实现了计算机的群体群体，以实现进取的范围。数据包和流量水平。系统的组织原理是将其分解为数据并行的“镜头”，并且在计算上具有挑战性的“模式分析”组件。运营商持续帮助保护其网络。