Version 2 (modified by, 13 years ago) (diff)


ExptsSecurity Project Status Report

Period: GEC12 (Nov) 2011

I. Major accomplishments

A. Milestones achieved

We delivered the report as stated in the Milestone ExptsSec: S3.d in September 2011. We also presented in GEC12 as part of the project highlights in software track according to the Y3 Milestone(a). The report and the presentation summarized the experiments to explore vulnerabilities of ProtoGENI and the related suggestions. According to Y3 Milestone(a), the GEC12 presentation (see the attached GEC12 presentation) includes the findings and suggestions that summarize our Y2 project activities. In addition, we presented a demo in GEC12 that shows ARP related security issue with ProtoGENI.

B. Deliverables made

(1) Report for the Milestone ExptsSec: S3.d.

(2) GEC12 presentation,

(3) Dawei Li, Xiaoyan Hong, "ARP security in ProtoGENI", The demo will show ARP attacks and its harm to ProtoGENI (on reserved nodes), and show potential defenses.

II. Description of work performed during last quarter

A. Activities and findings

Major activities are the experiments in the following areas: vulnerabilities in different layers of the GENI/ProtoGENI security model, analysis on authentication and authorization, DOS experiments. Our findings are made as deliverables through a report, a presentation at GEC12 and a demo at GEC12.

We participated in GEC12 in Nov 2011. We presented a summary of Y2 findings and suggestions and discussed our work with ProtoGENI team and Dr Vicraj Thomas, and obtained great feedback from them. We present a demo. We also attended related tracks and sessions.

B. Project participants

Xiaoyan Hong (PI)
Fei Hu (Co-PI)
Yang Xiao (Co-PI)
Bo Fu (Graduate student)
Jingcheng Gao (Graduate student)
Bo Gu (Graduate student)
Mohammed Hoque (Graduate student)
Dawei Li (Graduate student)
Darwin Witt (Undergraduate student)
Jason Bowman (Undergraduate student)

C. Publications (individual and organizational)

D. Outreach activities

We introduced GENI/ProtoGENI and our project to an undergraduate group, who receive NSF scholarship through SSTEM program, in their regular meeting. We also use ProtoGENI in a course project of a graduate course in the Fall 2011.

E. Collaborations

We participated in Cluter C conference-calls.

F. Other Contributions