Developing Security Science from Measurement
This project aims to define foundational data-driven methodologies and the related science to create a basis for continuous and dynamic monitoring that enables adaptive approaches to mitigate and contain the spread of attacks. The basis of the approach is data on security incidents from a real large-scale production environment at the National Center for Supercomputing Applications (NCSA) at the University of Illinois at Urbana-Champaign (UIUC). Collaborating with UIUC, ICSI researchers are providing leadership and insight into capabilities and limitations of security network technologies, particularly with regard to detection of intrusions, identification of vulnerabilities, and malware assessment. ICSI is participating in the development of security metrics and assisting in defining measurements to experimentally assess the metrics.
Funding for ICSI's contribution to this project is provided by UIUC.