Project Number

1792

Project Title

The Hive Mind: Applying a Distributed Security Sensor Network to GENI
a.k.a. HiveMind

Technical Contacts

Principal Investigator Sean Peisert peisert@cs.ucdavis.edu

Participating Organizations

Department of Computer Science
University of California, Davis
One Shields Ave.
Davis, CA 95616-8562

Carrie Gates
CA Labs, CA Technologies
Islandia, NY

GPO Liaison System Engineer

Vic Thomas

Scope

This work will develop and prototype a security layer underlying GENI that will allow providers of the system to collaboratively identify and defend against attacks and misuse of GENI resources. Specifically, the effort will develop prototypes for security monitoring, evaluating, and reporting software that could be useful to both GENI experimenters and GENI operations. The effort will also perform experiments using decentralized security algorithms that communicate between sensors in a federated system and evaluate and improve the security layer’s usefulness to potential security experimenters. The project team will collaborate with other teams to develop a security architecture for GENI.

Current Capabilities

BRIEF descriptions of resources/functions/tools that are available to anyone in the GENI community

Milestones

Spiral 4

• Hive: S4.a Demonstration and outreach at GEC12 (Completed on time 11/05/11)
• Hive: S4.b Security Experimentation & Hive Mind based monitoring (Completed on time 03/15/12)
• Hive: S4.c Report on Experimentation and Hive Mind demo (Due 07/27/12)
• Hive: S4.d Deliver software and documentation (Due 09/14/12)

Project Technical Documents

Design specification for security framework.

Software

Very early prototype of monitoring software and distributed sensors.

Quarterly Status Reports

February 2011 Report
March 2011 Report
December 2011 Report
March 2012 Report

Spiral 2 Connectivity

Links to wiki pages about details of infrastructure that the project is using (if any). Examples include IP addresses, hostnames, URLs, DNS servers, local site network maps, VLANIDs (if permanent VLANs are used), pointers to public keys. GPO may do first drafts of any of these and have the PI correct them to bootstrap. May also include ticket links for pending or known connectivity issues. Many projects will have a full tree of wiki pages here.

Related Projects

Includes non-GENI projects.