• Cyber Defense Technology Experimental Research (DETER) Network
• GridSec: Trusted Grid Computing with Dynamic Resources and Automated Intrusion Responses

• Dynamic Policy Evaluation for Containing Network Attacks (DEFCN)
• CLIQUES
• Critical Resource Allocation and Intrusion Response for Survivable Information Systems (CRISIS)
• Distributed Virtual Systems Project (DIVIRS)
• Security Infrastructure for Large Distributed Systems (SILDS)
• Global Operating System Technologies (GOST)
• Supporting Organizationally Accepted Practice (SOAP)
• Scalable Computing Infrastructure (SCOPE)

Work is underway across these projects in the following subject areas:

• Security Infrastructure: The Kerberos system will be extended to support authentication using public key cryptography, and distributed authorization and accounting servers will be built using a restricted proxy mechanism layered on top of Kerberos.

• Dynamic Policy Evaluation for Containing Network Attacks (DEFCN): The DEFCN effort is developing an access control framework and reference implementation supporting access control policies that are sensitive to network threat conditions. The framework integrates the mechanisms for evaluation and execution of such policies with intrusion detection and response systems. Through continued development and extension of a Generic Authorization and Access-control Application Programming Interface (GAA-API) the project members will ensure that the the framework is usable and integrated with a wide range of applications.

ISI's work in these areas is funded primarily by the Defense Advanced Research Projects Agency .

Products

• Kerberos - Computer security
• GAA-API - Generic Authorization and Access-control API
• Prospero - Information infrastrcutre
• The Prospero Resource Manager - Distributed parallel computing
• NetCheque - Network payment and electronic commerce
• NetCash - Anonymous network payment

Positions Available

We do not have any positions currently available.