File preview
A
Perspec)ve
on
Transi)oning
Research
to
an
Open
Source
Product
Vern Paxson
EECS Department, University of California International Computer Science Institute Lawrence Berkeley National Laboratory Berkeley, California USA vern@cs.berkeley.edu November 28, 2012
Context
• Bro: real-time network monitoring/analysis
– Grew out of coupling research analyzing tcpdump data w/ operational needs – Open source culture (e.g., tcpdump) – 130K+ LOC
• Sustained in early years by security operations funding • Ties with operation = Research Gold
– Access to data & problems at scale
Synergies
&
An)-‐Synergies
• Building up open-source community can lead to research opportunities:
• … but focus on practical issues can also go under-appreciated:
A
Delicate
Balance
• Need to craft research proposals so that some engineering/development is in scope
– Tricky in terms of personnel: grad students? – Documentation is especially hard (also: training) – NSF Transition Plans highly helpful here!
• As is Broader Impact if the story is solid
• NSF Strategic Technologies for the Internet (past) and Software Development for Cyberinfrastructure (present) programs invaluable
Perspec)ve
on
Transi)oning
Research
to
an
Open
Source
Product
Vern Paxson
EECS Department, University of California International Computer Science Institute Lawrence Berkeley National Laboratory Berkeley, California USA vern@cs.berkeley.edu November 28, 2012
Context
• Bro: real-time network monitoring/analysis
– Grew out of coupling research analyzing tcpdump data w/ operational needs – Open source culture (e.g., tcpdump) – 130K+ LOC
• Sustained in early years by security operations funding • Ties with operation = Research Gold
– Access to data & problems at scale
Synergies
&
An)-‐Synergies
• Building up open-source community can lead to research opportunities:
• … but focus on practical issues can also go under-appreciated:
A
Delicate
Balance
• Need to craft research proposals so that some engineering/development is in scope
– Tricky in terms of personnel: grad students? – Documentation is especially hard (also: training) – NSF Transition Plans highly helpful here!
• As is Broader Impact if the story is solid
• NSF Strategic Technologies for the Internet (past) and Software Development for Cyberinfrastructure (present) programs invaluable