Description of Projects Utilizing Equipment Purchased under the DURIP Award

Intrusion detection and, more recently, automated response to intrusions have been the cornerstones of our research programs in the Computer Security Laboratory at UC Davis. UC Davis has pioneered several novel methods for intrusion detection on large networks. This research, however, can progress only if the laboratory's network infrastructure is sufficiently large to realistically model that of a large organization. ITC Davis is also among the first to study cooperative automated response to intrusions. Network devices: routers and firewalls, exchange attack information which can be used to optimally filter the malicious traffic. This project depends heavily on having network hardware on which to install and test our prototypes. Thanks to the generous DURIP equipment grant, our group was able to obtain the resources necessary for this work to proceed.