CC* Integration: NetBASILISK: NETwork Border At Scale Integrating and Leveraging Individual Security Components

CC* 集成：NetBASILISK：大规模网络边界集成和利用各个安全组件

• 批准号: 1925476
• 负责人: Eric Boyd
• 金额: $ 99.97万
• 依托单位: Regents of the University of Michigan - Ann Arbor
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-10-01 至 2022-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1925476&HistoricalAwards=false
• 关键词: CC; Integration; NetBASILISK; NETwork; Border

The NetBASILISK (NETwork Border At Scale Integrating and Leveraging Individual Security Components) project enables researchers and network engineers at the University of Michigan to introduce the next level of security and privacy protection scaled to the vast volume of generated research data. As attackers develop more sophisticated tools to acquire student and faculty private data, institutional financial information, and proprietary, often classified, research information, it is imperative for information technology staff to detect and stop these attacks. By observing patterns of network traffic, NetBASILISK will accomplish these goals with a minimal impact on the speed or volume of network traffic.Current threat prevention systems do not scale to the growing volume of research data at an affordable cost. The University of Michigan solution, a novel framework combining open source and proprietary components, significantly improves system performance and accuracy in detecting and preventing threats to institutional data. NetBASILISK comprises powerful load balancing threat prevention mechanisms, data filtering tools, and threat detection technology. NetBASILISK will create a secure network perimeter while facilitating science such as cryo-electron microscopy, Large Hadron Collider particle research, and non-distorted Internet measurement, as well as enabling innovative network enhancements such as technologies to circumvent web censorship.NetBASILISK will be used to inform the design of advanced network security devices for universities that scale to accommodate the network traffic requirements of data intensive science. Lessons learned and technology enhancements discovered by the project will be shared with the university networking community, as well as commercial partners. The science community will be informed of lessons learned from new design patterns employed for border security. The science drivers of the project, including advances in cryo-electron microscopy, networking, and physics will provide broad, impactful benefits. Project funding will also be used to support faculty, graduate students, and a postdoctoral researcher.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

NetBASILISK（大规模集成和利用单个安全组件的网络边界）项目使密歇根大学的研究人员和网络工程师能够针对生成的大量研究数据引入更高级别的安全和隐私保护。随着攻击者开发出更复杂的工具来获取学生和教师的私人数据、机构财务信息以及专有的（通常是机密的）研究信息，信息技术人员必须检测并阻止这些攻击。通过观察网络流量模式，NetBASILISK 将在对网络流量的速度或流量影响最小的情况下实现这些目标。当前的威胁防御系统无法以可承受的成本扩展到不断增长的研究数据量。密歇根大学的解决方案是一个结合了开源和专有组件的新颖框架，可显着提高系统性能以及检测和防止机构数据威胁的准确性。 NetBASILISK 包含强大的负载平衡威胁防御机制、数据过滤工具和威胁检测技术。 NetBASILISK 将创建一个安全的网络边界，同时促进冷冻电子显微镜、大型强子对撞机粒子研究和非扭曲互联网测量等科学，并实现创新的网络增强，例如规避网络审查的技术。NetBASILISK 将用于为大学先进网络安全设备的设计提供信息，这些设备可以扩展以满足数据密集型科学的网络流量要求。该项目的经验教训和发现的技术改进将与大学网络社区以及商业合作伙伴分享。科学界将从用于边境安全的新设计模式中吸取经验教训。该项目的科学驱动力，包括冷冻电子显微镜、网络和物理学的进步，将带来广泛、有影响力的好处。项目资金还将用于支持教师、研究生和博士后研究员。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Benchmarking NetBASILISK: a Network Security Project for Science

NetBASILISK 基准测试：科学网络安全项目

• DOI: 10.1051/epjconf/202125102068
• 发表时间: 2021-01
• 期刊: EPJ Web of Conferences
• 作者: Guhit, Jem;Colone, Edward;McKee, Shawn;Steinhoff, Kris;Thomas, Katarina
• 通讯作者: Thomas, Katarina