[[PageOutline]] = ExptsSecurity Project Status Report = '''Period: GEC13 (March) 2012''' [[BR]] == I. Major accomplishments == === A. Milestones achieved === We delivered the report as stated in the Milestone ExptsSec:S4.b. The report summarized the experiments in exploring vulnerabilities of access control and service availability. We also reported the results of follow-up experiments which validate that the ARP issue demonstrated in GEC12 has been fixed. The experiments addressing the service availability issue are done through a set of DoS/DDoS attacks. These experiments are published and presented in the workshop of GREE12, which is in conjunction with GEC 13 (see the deliverables). We also reported our choice for using one cloud. [[BR]] === B. Deliverables made === (1) Report for the Milestone ExptsSec: S4.b. http://groups.geni.net/geni/attachment/wiki/ExptsSecurityAnalysis/ExptsSec-milestone-s4b.pdf [[BR]] (2) J. Gao and Y. Xiao, "ProtoGENI DoS/DDoS Security Tests and Experiments," Proceedings of First GENI Research and Educational Experiment Workshop (GREE12), in conjunction with GENI GEC 13. [[BR]] == II. Description of work performed during last quarter == === A. Activities and findings === Major activities are the analysis and experiments in the following areas: Analyzing the access control mechanism and cloud resources, and experimenting with follow-up ARP experiment and various DoS/DDoS attacks towards availability. [[BR]] Our findings are made as deliverables through a report and a publication (and a presentation) at GREE12. [[BR]] At this point, we revised the rest of the milestones. [[BR]] We participated in GEC13 and attended related tracks and sessions. [[BR]] We also participated and presented in the workshop of "First GENI Research and Educational Experiment Workshop (GREE12)" in conjunction with it. [[BR]] === B. Project participants === Xiaoyan Hong (PI) [[BR]] Fei Hu (Co-PI) [[BR]] Yang Xiao (Co-PI) [[BR]] Jingcheng Gao (Graduate student) [[BR]] Dawei Li (Graduate student) [[BR]] Lei Zhao (Graduate student) [[BR]] === C. Publications (individual and organizational) === J. Gao and Y. Xiao, "ProtoGENI DoS/DDoS Security Tests and Experiments," Proceedings of First GENI Research and Educational Experiment Workshop (GREE12), in conjunction with GENI GEC 13. [[BR]] === D. Outreach activities === We introduced GENI/ProtoGENI and our project to an undergraduate group. We also introduced and used ProtoGENI in a graduate course in the Fall 2011. === E. Collaborations === We participated some of the Cluster C conference-calls. [[BR]] === F. Other Contributions ===