Project Grant 2317830
- This three-year, $300,000 project grant from the National Science Foundation's Computer and Information Science and Engineering program aims to develop scalable defenses against Sybil attacks in dynamic computer networks. The University of New Mexico will collaborate with cybersecurity practitioners and academia through two research workshops to design new defenses where the resource burning cost to legitimate participants grows slowly as a function of the adversary's resources and rate of...
- The National Science Foundation awarded $349,079 under its Computer and Information Science and Engineering program (CFDA 47.070) to Stony Brook University for a collaborative research project titled "COLLABORATIVE RESEARCH: SATC: CORE: MEDIUM: APP-DRIVEN WEB BROWSING: NOVEL RISKS, VULNERABILITIES, AND DEFENSES." The project, taking place from October 1, 2022 to September 30, 2026, will analyze security risks inherent in non-browser applications that enable web browsing. Researchers...
- This $786,661 federal Project Grant award from the National Science Foundation (NSF) Computer and Information Science and Engineering (CISE) program (CFDA 47.070) will support the development of novel techniques and systems to identify vulnerabilities and detect malicious attacks in Web3 applications and blockchain-based financial services. The project, titled "SATC: CORE: MEDIUM: BEDROCK: SECURITY FOR SMART CONTRACTS," will introduce a multi-layer framework called BEDROCK to analyze...
- The National Science Foundation Division of Computing and Communication Foundations awarded a $499,058 Project Grant to Stony Brook University to support research titled "SATC: CORE: SMALL: SELECTIVE DATA PROTECTION AGAINST DATA-ORIENTED AND TRANSIENT EXECUTION ATTACKS." The grant period runs from July 1, 2021 to June 30, 2024. The funding supports research and development of techniques to protect data and systems against data-oriented and transient execution attacks through...
- This EAGER award of $288,979 from the National Science Foundation's (NSF) Computer and Information Science and Engineering (CISE) program supports research to design, develop, and prototype a secure, scalable, global name-based network service by combining the Named-Data Networking (NDN) and Scalability, Control, and Isolation on Next-Generation Networks (SCION) architectures. The goal is to address limitations of the current host-centric Internet Protocol (IP) architecture by developing a...
- This two-year, $174,900 project grant from the National Science Foundation's Division of Computer and Network Systems will fund research at DePaul University towards developing more accurate vulnerability detection and less disruptive vulnerability mitigation techniques. The goal is to address challenges in reliably finding software vulnerabilities and patching them without compromising system availability. Researchers will design a scheme for encoding intrinsic vulnerability characteristics...
- This three-year, $244,997 Project Grant from the National Science Foundation's Computer and Information Science and Engineering program aims to develop scalable methods for analyzing large-scale network traffic data to quantify internet-of-things (IoT) device insecurities and characterize malicious IoT campaigns. The awardee, San Diego State University Research Foundation, will work with collaborators to design algorithms and formal methods using supervised deep learning to fingerprint exploited...
- The National Science Foundation (NSF) awarded a $1.2M Project Grant to the University of Virginia under the Computer and Information Science and Engineering (CISE) program (CFDA 47.070) to enhance the security and privacy of community cyberinfrastructures (CI) for collaborative research. This 3-year project focuses on developing advanced techniques to secure data management and computation within CI systems, including centralized computing, distributed computing, and data computation. The...
- This $600,000 Project Grant from the National Science Foundation's Computer and Information Science and Engineering program (CFDA 47.070) supports research at the University of California, Davis to address security vulnerabilities in cloud computing infrastructure and develop defenses against targeted microarchitectural attacks. Over a four-year period from July 2022 to June 2026, the university will conduct a comprehensive threat analysis of cloud schedulers and investigate software-based and...
- This Project Grant award from the National Science Foundation (NSF) under the Computer and Information Science and Engineering program (CFDA 47.070) will provide $525,000 over 3 years to Trustees of Boston University for research on the Domain Name System (DNS). The project will conduct large-scale analysis of DNS configurations and management practices to build fundamental knowledge about the DNS. It will leverage public datasets to statistically model DNS contents and use graph-based...
COLLABORATIVE RESEARCH: SATC: CORE: SMALL: INVESTIGATION OF NAMING SPACE HIJACKING THREAT AND ITS DEFENSE -THIS PROJECT DELVES INTO THE EMERGING SECURITY RISKS ASSOCIATED WITH NAMING SPACE HIJACKING ATTACKS TARGETING INTERNET APPLICATIONS. IN THIS TYPE OF ATTACK, AN ADVERSARY EXPLOITS SIMILARITIES AND CONFUSION IN NAMES OF DOMAINS AND RESOURCES IN CYBER SPACE (E.G., AMAZON.COM VS. AMAZOM.COM) TO TARGET USERS AND EVEN SOFTWARE DEVELOPERS, LEADING TO FINANCIAL LOSS, INTELLECTUAL PROPERTY THEFT, REPUTATION DAMAGE, AND DISRUPTION OF NORMAL OPERATIONS FOR UNSUSPECTING USERS. THE PROJECT?S NOVELTY IS THE ASSESSMENT OF THE SECURITY RISKS OF THESE TYPES OF ATTACKS SYSTEMATICALLY AND QUANTITATIVELY ACROSS VITAL PLATFORMS AND APPLICATIONS, INCLUDING SOFTWARE SUPPLY CHAIN ECOSYSTEMS, THE METAVERSE, AND DECENTRALIZED FINANCIAL APPLICATIONS (WEB3). THIS INVESTIGATION ALSO ENABLES THE DEVELOPMENT OF EFFECTIVE DEFENSE MECHANISMS AND PROVIDES A STRONG SAFETY GUARANTEE TO INTERNET USERS. THE PROJECT'S BROADER SIGNIFICANCE AND IMPORTANCE LIE IN SECURING CURRENT AND FUTURE INTERNET APPLICATIONS, THEREBY ENHANCING THE AVAILABILITY AND RELIABILITY OF INTERNET SERVICES. ADDITIONALLY, EDUCATIONAL EFFORTS ARE DEVOTED TO THE CURRICULUM DESIGN OF NEW CYBERSECURITY COURSES WITH A FOCUS ON WEB3 APPLICATIONS. OUTREACH ACTIVITIES ARE ALSO CONDUCTED TO PROMOTE THE INVOLVEMENT OF UNDERREPRESENTED MINORITIES IN COMPUTING AND TO ENHANCE CYBERSECURITY AWARENESS AND KNOWLEDGE IN THE STATES OF VIRGINIA AND DELAWARE (AN EPSCOR STATE). THIS PROJECT DEVELOPS MULTIPLE FRAMEWORKS TO CONTINUOUSLY MONITOR AND CAPTURE ANY SUSPICIOUS ACTIVITIES AND PINPOINT POTENTIAL NAMING SPACE HIJACKING ISSUES. THE FIRST TASK FOCUSES ON THE IDENTIFICATION AND DISCLOSURE OF VULNERABILITIES WITHIN SOFTWARE SUPPLY CHAIN ECOSYSTEMS THAT CAN BE EXPLOITED BY ADVERSARIES TO HIJACK EXISTING PACKAGES OR DISTRIBUTE MALICIOUS CODE. THE SECOND TASK CENTERS ON EXPLORING POTENTIAL THREATS WITHIN USER-SPECIFIC WORLDS IN EMERGING METAVERSE PLATFORMS. THE THIRD TASK INVOLVES LEVERAGING MACHINE LEARNING TECHNIQUES TO DETECT AND MITIGATE FRAUDULENT ONLINE ACTIVITIES WITHIN DECENTRALIZED BLOCKCHAIN APPLICATIONS. ULTIMATELY, THE PROJECT AIMS TO DESIGN AND DEVELOP LIGHTWEIGHT AND ROBUST DEFENSE SYSTEMS THAT CAN EFFECTIVELY MITIGATE THE POTENTIAL SECURITY THREATS POSED BY NAMING SPACE HIJACKING THREATS. THE OVERALL SECURITY RISKS ARE EVALUATED THROUGH LONG-TERM OBSERVATION AND LARGE-SCALE MEASUREMENT STUDIES ON REAL-WORLD APPLICATIONS. THE DEFENSE STRATEGIES ARE INTEGRATED IN EXISTING SYSTEMS AND PROTOCOLS, AND THOROUGHLY EVALUATED ON REAL-WORLD SCENARIOS TO DEMONSTRATE THEIR EFFECTIVENESS. THIS AWARD REFLECTS NSF'S STATUTORY MISSION AND HAS BEEN DEEMED WORTHY OF SUPPORT THROUGH EVALUATION USING THE FOUNDATION'S INTELLECTUAL MERIT AND BROADER IMPACTS REVIEW CRITERIA.
Mod # | Description | ReasonForModification | Federal Obligation | Date |
|---|---|---|---|---|
| Not listed | $102.0k | 8/14/25 | ||
| Not listed | $100.0k | 8/31/23 | ||
| Not listed | $98.0k | 7/26/23 |