Virtual Network Computing Testbed for Cybersecurity Research.

摘要

The goal of this project was to construct a completely realistic testbed for cyber-security research. This testbed was intended to support the functioning of networks of 1000+ virtual machines in real time, and support the launching of real attacks, logging them in a database, and building classifiers to detect them. All of these goals have been accomplished. Several large networks have been built, and they can be run faster than real time. The primary significance of this testbed is that we can implement and evaluate defensive methods quickly and realistically. Also, we can evaluate the relative strengths of various data mining methods in cyber-security. Our plan for the next year is to add support for mobile wireless nodes in our virtual networks and improve the automation of the construction of networks. We plan to use our improved testbed to evaluate ensemble classification methods and to test the use of nonlinear classification methods on attack data.