wiki:Quarterly-ExptsSec-GEC13report.txt

Version 1 (modified by hxy@cs.ua.edu, 7 years ago) (diff)

--

ExptsSecurity Project Status Report

Period: GEC13 (March) 2012

I. Major accomplishments

A. Milestones achieved

We delivered the report as stated in the Milestone ExptsSec:S4.b. The report summarized the experiments in exploring vulnerabilities of access control and service availability. We also reported the results of follow-up experiments which validate that the ARP issue demonstrated in GEC12 has been fixed. The experiments addressing the service availability issue are done through a set of DoS/DDoS attacks. These experiments are published and presented in the workshop of GREE12, which is in conjunction with GEC 13 (see the deliverables). We also reported our choice for using one cloud.

B. Deliverables made

(1) Report for the Milestone ExptsSec: S4.b. http://groups.geni.net/geni/attachment/wiki/ExptsSecurityAnalysis/ExptsSec-milestone-s4b.pdf

(2) J. Gao and Y. Xiao, "ProtoGENI DoS/DDoS Security Tests and Experiments," Proceedings of First GENI Research and Educational Experiment Workshop (GREE12), in conjunction with GENI GEC 13.

II. Description of work performed during last quarter

A. Activities and findings

Major activities are the analysis and experiments in the following areas: Analyzing the access control mechanism and cloud resources, and experimenting with follow-up ARP experiment and various DoS/DDoS attacks towards availability.

Our findings are made as deliverables through a report and a publication (and a presentation) at GREE12.

At this point, we revised the rest of the milestones.

We participated in GEC13 and attended related tracks and sessions.

We also participated and presented in the workshop of "First GENI Research and Educational Experiment Workshop (GREE12)" in conjunction with it.

B. Project participants

Xiaoyan Hong (PI)
Fei Hu (Co-PI)
Yang Xiao (Co-PI)
) Jingcheng Gao (Graduate student)
Dawei Li (Graduate student)
Lei Zhao (Graduate student)

C. Publications (individual and organizational)

  1. Gao and Y. Xiao, "ProtoGENI DoS/DDoS Security Tests and Experiments," Proceedings of First GENI Research and Educational Experiment Workshop (GREE12), in conjunction with GENI GEC 13.

D. Outreach activities

We introduced GENI/ProtoGENI and our project to an undergraduate group. We also introduced and used ProtoGENI in a graduate course in the Fall 2011.

E. Collaborations

We participated some of the Cluster C conference-calls.

F. Other Contributions