Dartmouth internet security testbed (DIST: building a campus-wide wireless testbed

Authors:
Sergey Bratus;David Kotz;Keren Tan;William Taylor;Anna Shubina;Bennet Vance;Michael E. Locasto
Affiliations:
Dartmouth College, Hanover, New Hampshire;Dartmouth College, Hanover, New Hampshire;Dartmouth College, Hanover, New Hampshire;Dartmouth College, Hanover, New Hampshire;Dartmouth College, Hanover, New Hampshire;Dartmouth College, Hanover, New Hampshire;George Mason University, Fairfax, Virginia
Venue:
CSET'09 Proceedings of the 2nd conference on Cyber security experimentation and test
Year:
2009

Citing 42
Cited 21

Notions of computation and monads

Information and Computation
The essence of functional programming

POPL '92 Proceedings of the 19th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Evidence for long-tailed distributions in the internet

IMW '01 Proceedings of the 1st ACM SIGCOMM Workshop on Internet Measurement
Testing monadic code with QuickCheck

ACM SIGPLAN Notices
Experience in measuring backbone traffic variability: models, metrics, measurements and meaning

Proceedings of the 2nd ACM SIGCOMM Workshop on Internet measurment
A New Version of the Stream Cipher SNOW

SAC '02 Revised Papers from the 9th Annual International Workshop on Selected Areas in Cryptography
Securing web application code by static analysis and runtime protection

Proceedings of the 13th international conference on World Wide Web
DOMINO: a system to detect greedy behavior in IEEE 802.11 hotspots

Proceedings of the 2nd international conference on Mobile systems, applications, and services
A framework for wireless LAN monitoring and its applications

Proceedings of the 3rd ACM workshop on Wireless security
Exploiting the Transients of Adaptation for RoQ Attacks on Internet Resources

ICNP '04 Proceedings of the 12th IEEE International Conference on Network Protocols
Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)

SP '06 Proceedings of the 2006 IEEE Symposium on Security and Privacy
Precise alias analysis for static detection of web application vulnerabilities

Proceedings of the 2006 workshop on Programming languages and analysis for security
Noxes: a client-side solution for mitigating cross-site scripting attacks

Proceedings of the 2006 ACM symposium on Applied computing
Encoding Information Flow in Haskell

CSFW '06 Proceedings of the 19th IEEE workshop on Computer Security Foundations
Extended static checking for haskell

Proceedings of the 2006 ACM SIGPLAN workshop on Haskell
Jigsaw: solving the puzzle of enterprise 802.11 analysis

Proceedings of the 2006 conference on Applications, technologies, architectures, and protocols for computer communications
Introduction to Modern Cryptography (Chapman & Hall/Crc Cryptography and Network Security Series)

Introduction to Modern Cryptography (Chapman & Hall/Crc Cryptography and Network Security Series)
Flow analysis of lazy higher-order functional programs

Theoretical Computer Science
Defeating script injection attacks with browser-enforced embedded policies

Proceedings of the 16th international conference on World Wide Web
SMask: preventing injection attacks in web applications by approximating automatic data/code separation

Proceedings of the 2007 ACM symposium on Applied computing
Sound and precise analysis of web applications for injection vulnerabilities

Proceedings of the 2007 ACM SIGPLAN conference on Programming language design and implementation
Finding security vulnerabilities in java applications with static analysis

SSYM'05 Proceedings of the 14th conference on USENIX Security Symposium - Volume 14
Using web application construction frameworks to protect against code injection attacks

Proceedings of the 2007 workshop on Programming languages and analysis for security
Melange: creating a "functional" internet

Proceedings of the 2nd ACM SIGOPS/EuroSys European Conference on Computer Systems 2007
Challenging the anomaly detection paradigm: a provocative discussion

NSPW '06 Proceedings of the 2006 workshop on New security paradigms
Large-scale collection and sanitization of network security data: risks and challenges

NSPW '06 Proceedings of the 2006 workshop on New security paradigms
BrowserShield: Vulnerability-driven filtering of dynamic HTML

ACM Transactions on the Web (TWEB)
Legal issues surrounding monitoring during network research

Proceedings of the 7th ACM SIGCOMM conference on Internet measurement
Multi-module vulnerability analysis of web-based applications

Proceedings of the 14th ACM conference on Computer and communications security
Dependable security: testing network intrusion detection systems

HotDep'07 Proceedings of the 3rd workshop on on Hot Topics in System Dependability
Securing web applications with static and dynamic information flow tracking

PEPM '08 Proceedings of the 2008 ACM SIGPLAN symposium on Partial evaluation and semantics-based program manipulation
End-to-end web application security

HOTOS'07 Proceedings of the 11th USENIX workshop on Hot topics in operating systems
SIF: enforcing confidentiality and integrity in web applications

SS'07 Proceedings of 16th USENIX Security Symposium on USENIX Security Symposium
Static detection of cross-site scripting vulnerabilities

Proceedings of the 30th international conference on Software engineering
IRBs and security research: myths, facts and mission creep

UPSEC'08 Proceedings of the 1st Conference on Usability, Psychology, and Security
Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications

SP '08 Proceedings of the 2008 IEEE Symposium on Security and Privacy
The Hidden Difficulties of Watching and Rebuilding Networks

IEEE Security and Privacy
Verifiable functional purity in java

Proceedings of the 15th ACM conference on Computer and communications security
Static contract checking for Haskell

Proceedings of the 36th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Secure Content Sniffing for Web Browsers, or How to Stop Papers from Reviewing Themselves

SP '09 Proceedings of the 2009 30th IEEE Symposium on Security and Privacy
A multi-model approach to the detection of web-based attacks

Computer Networks: The International Journal of Computer and Telecommunications Networking - Web security
Map: a scalable monitoring system for dependable 802.11 wireless networks

IEEE Wireless Communications

xJS: practical XSS prevention for web application development

WebApps'10 Proceedings of the 2010 USENIX conference on Web application development
Enforcing request integrity in web applications

DBSec'10 Proceedings of the 24th annual IFIP WG 11.3 working conference on Data and applications security and privacy
SessionShield: lightweight protection against session hijacking

ESSoS'11 Proceedings of the Third international conference on Engineering secure software and systems
Exploring the relationship betweenweb application development tools and security

WebApps'11 Proceedings of the 2nd USENIX conference on Web application development
A systematic analysis of XSS sanitization in web application frameworks

ESORICS'11 Proceedings of the 16th European conference on Research in computer security
Context-sensitive auto-sanitization in web templating languages using type qualifiers

Proceedings of the 18th ACM conference on Computer and communications security
Automated removal of cross site scripting vulnerabilities in web applications

Information and Software Technology
Secure code generation for web applications

ESSoS'10 Proceedings of the Second international conference on Engineering Secure Software and Systems
Quo vadis? a study of the evolution of input validation vulnerabilities in web applications

FC'11 Proceedings of the 15th international conference on Financial Cryptography and Data Security
Automated code injection prevention for web applications

TOSCA'11 Proceedings of the 2011 international conference on Theory of Security and Applications
An empirical analysis of input validation mechanisms in web applications and languages

Proceedings of the 27th Annual ACM Symposium on Applied Computing
Scalable integrity-guaranteed AJAX

APWeb'12 Proceedings of the 14th Asia-Pacific international conference on Web Technologies and Applications
ARC: protecting against HTTP parameter pollution attacks using application request caches

ACNS'12 Proceedings of the 10th international conference on Applied Cryptography and Network Security
Enemy of the state: a state-aware black-box web vulnerability scanner

Security'12 Proceedings of the 21st USENIX conference on Security symposium
The devil is in the (implementation) details: an empirical analysis of OAuth SSO systems

Proceedings of the 2012 ACM conference on Computer and communications security
Towards fully automatic placement of security sanitizers and declassifiers

POPL '13 Proceedings of the 40th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages
WEBLOG: a declarative language for secure web development

Proceedings of the Eighth ACM SIGPLAN workshop on Programming languages and analysis for security
deDacota: toward preventing server-side XSS via automatic code and data separation

Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security
PreparedJS: secure script-templates for javascript

DIMVA'13 Proceedings of the 10th international conference on Detection of Intrusions and Malware, and Vulnerability Assessment
Automatic mediation of privacy-sensitive resource access in smartphone applications

SEC'13 Proceedings of the 22nd USENIX conference on Security
A survey on server-side approaches to securing web applications

ACM Computing Surveys (CSUR)

Quantified Score

Hi-index	0.00

Visualization

Abstract

We describe our experiences in deploying a campus-wide wireless security testbed. The testbed gives us the capability to monitor security-related aspects of the 802.11 MAC layer in over 200 diverse campus locations. We describe both the technical and the social challenges of designing, building, and deploying such a system, which, to the best of our knowledge, is the largest such testbed in academia (with the UCSD's Jigsaw infrastructure a close competitor). In this paper we focus on the testbed setup, rather than on the experimental data and results.