GSRA Position F09-10
Applications of Chaos Theory to the Detection of Computer Network Attacks
Faculty Name: Stephen W Turner
Department: CSEP
Campus Address: 214B Murchie Science Building
Email: swturner@umflint.edu
Phone: 8107666696
Project Description: This research will examine network traffic that arrives at the main routers of the university for purposes of the detection of computer network attacks.
Under normal circumstances (i.e., non-attack situations), it is believed that data traffic arriving at the university exhibits characteristics that appear to be random but in reality have properties of mathematical chaos. This means a behavior that is not random, but it is very difficult to predict and analyze. It is also believed that when attacks occur, the traffic patterns cease to be chaotic and instead become highly predictable, meaning that a specific pattern of behavior can be relatively easily observed.
Thus, this project seeks to examine university traffic to develop algorithms with which any security attacks can be reliably detected.
Semesters Desired: Fall 2009; Winter 2010
GSRA Position Description: The GSRA's primary task will be to write programs used by the co-investigators to filter massive amounts of data. This data, in raw form, will be in the form of log files recorded on university routers and collected by Information Technology Services. The raw data must be intelligently filtered so that it can be turned into useful information. Thus, the GSRA's role is to write programs with which we filter the data and extract information. In addition to using the log files we receive from ITS, we will occasionally gather "real-time" information. That is, instead of past logs, we will gather information about network traffic coming into specific computers at specific times. This will also be a role performed by the GSRA.
Specific Day/Time Requirements: None specified
Special Requirements: None specified
Graduate Students in These Programs May Apply: Position has candidate in mind