Project Number

1783

Project Title

GENI Experiments for Traffic Capture Capabilities and Security Requirement Analysis
a.k.a. ExptsSecurity

Technical Contacts

Principal Investigator Xiaoyan Hong hxy@cs.ua.edu
Co-PI: Fei Hu fei@eng.ua.edu
Co-PI: Yang Xiao yangxiao@ieee.org

Participating Organizations

Department of Computer Science
The University of Alabama, Box 870290
Tuscaloosa, AL 35487

Department of Electrical and Computer Engineering
The University of Alabama, Box 870286
Tuscaloosa, AL 35487

GPO Liaison System Engineer

Vic Thomas vthomas@geni.net

Scope

This effort will help define GENI security requirements based on investigations through ProtoGENI experiments using at least two aggregates, one of which will be a wireless aggregate. The investigations will use network traffic capture and analysis under both normal and misbehaving situations. The well-articulated experiments will analyze the security and privacy characteristics, test GENI traffic recording and capture tools (following the results from Spiral I and II), and make suggestions for improvements to the ProtoGENI control framework with special emphasis on security improvements.

Current Capabilities

BRIEF descriptions of resources/functions/tools that are available to anyone in the GENI community

Milestones

• ExptsSec: S4.a Report on results of experiments designed in Yr. 2 (Completed on time 11/04/11) Click here for the document and Click here for GEC 12 progress report.
• ExptsSec: S4.b Security experiments using cloud resources in GENI (Completed early 03/20/12) Click here for the document and Click here for GEC 13 progress report.
• ExptsSec: S4.c Report of the experiments designed in Milestone b (Due 07/27/12 (late)) Click here for analysis on key management and authentication. And Click here for GEC 14 progress report.
• ExptsSec: S4.d Report summarizing results of security experiments (Due 09/14/12 (late)) Click here for suggestions on key management and access control. Click here for GEC 15 progress report.

Project Technical Documents

Description of planned security experiments
Revised description of planned security experiments
Presentation at GEC7
Report on initial experiments and findings
Report on experimentation exploiting vulnerabilities and validating vulnerability hypotheses
Presentation at GEC8
Spiral 2 Year-end Project Review
Report on experiment design to extend the scope to wireless nodes
Presentation at GEC9
Explore ProtoGENI Security Problems From Experimentation, Dawei Li, Xiaoyan Hong, a preparation for submission, Dec 2010.
Summary Findings and Suggestions
Presentation at GEC10
Report of recent results and suggestions for S3.b.
Report of results and suggestions for S3.c
Report of results and suggestions for S3.d
GEC12 presentation
Deliverable (results of analysis and experiments) for S4.b
S4.c deliverable (analysis on key management and authentication)
S4.d deliverable (suggestions on key management and access control)

Quarterly Status Reports

December 2009 report
March 2010 report
June 2010 report
GEC9 2010 report
GEC10 2011 report
GEC11 2011 report
GEC12 2011 report
GEC13 2012 report
GEC14 2012 report
GEC15 2012 report
GEC16 2013 report

Spiral 2 Connectivity

To be reviewed: Layer 3 connectivity to ProtoGENI clearinghouse. Layer 3 connectivity to provision resources used by experiments. Layer 2/3 connectivity between resources used in experiment.

Related Projects

Includes non-GENI projects.