Project Number

1792

Project Title

The Hive Mind: Applying a Distributed Security Sensor Network to GENI
a.k.a. HiveMind

Technical Contacts

Principal Investigator ​Sean Peisert Sean Peisert

Participating Organizations

Department of Computer Science
University of California, Davis
One Shields Ave.
Davis, CA 95616-8562

Battelle
Richland, WA

Carrie Gates
CA Labs, CA Inc.
New York, NY

GPO Liaison System Engineer

​Vic Thomas

Scope

This work will develop and prototype a security layer underlying GENI that will allow providers of the system to collaboratively identify and defend against attacks and misuse of GENI resources. Specifically, the effort will develop prototypes for security monitoring, evaluating, and reporting software that could be useful to both GENI experimenters and GENI operations. The effort will also perform experiments using decentralized security algorithms that communicate between sensors in a federated system and evaluate and improve the security layer’s usefulness to potential security experimenters. The project team will collaborate with other teams to develop a security architecture for GENI.

Current Capabilities

BRIEF descriptions of resources/functions/tools that are available to anyone in the GENI community

Milestones

MilestoneDate(Hive: S3.a Demonstration and outreach at GEC9)?
MilestoneDate(Hive: S3.b Plan for evaluating efficacy of Hive Mind)? Evaluation Plan​
MilestoneDate(Hive: S3.c Demonstration and outreach at GEC10)?
MilestoneDate(Hive: S3.d Demonstration and outreach at GEC11)?
MilestoneDate(Hive: S3.e Paper on Security Experimentation with GENI)?
MilestoneDate(Hive: S3.f Deliver software and documentation)?

Project Technical Documents

Design specification for security framework.​

Software

Very early prototype of monitoring software and distributed sensors.​

Quarterly Status Reports

February 2011 Report
March 2011 Report

Spiral 2 Connectivity

Links to wiki pages about details of infrastructure that the project is using (if any). Examples include IP addresses, hostnames, URLs, DNS servers, local site network maps, VLANIDs (if permanent VLANs are used), pointers to public keys. GPO may do first drafts of any of these and have the PI correct them to bootstrap. May also include ticket links for pending or known connectivity issues. Many projects will have a full tree of wiki pages here.

Related Projects

Includes non-GENI projects.