CT-ISG: Compiler-Enabled Adaptive Security Monitoring on Networked Embedded Systems

点击翻译按钮获取中文摘要

CT-ISG: Compiler-Enabled Adaptive Security Monitoring on NetworkedEmbedded SystemsZhiyuan Li, Saurabh Bagchi, Yung-Hsiang LuDepartment of Computer Science,Department of Electrical and Electronic EngineeringPurdue UniversityHardware technologies have made steady progressin miniaturization of sensors and computing/communication devices,which has driven a trend towards pervasive computing, which is a wayto let computing devices directly interact with the physical world to monitorthe natural environment, to provide building safety, and so on.In order to make pervasive computing a reality,it is critical to secure the underlying networked embedded systems,because these systems may collect importantenvironment data upon which time-sensitive decisions are dependent.Unfortunately, many of networked embedded systems, e.g. wireless andwired sensor networks, RFID infrastructure, wireless mesh networks,have components or links that are openly exposed to potentialadversaries and hence are under constant security threats such as nodecapture, denial of service, and intrusion, among others. To make thematters worse, many networked embedded systems have much moreconstrained resources such as storage, bandwidth, computing power andenergy than computers used in non-embedded applications, e.g. desktopmachines and servers. Sophisticated computer security schemesdeveloped over the last few decades are often infeasible on networkedembedded systems, at least not in their original forms.The research team of this projectdevelops a multi-grade monitoring scheme, supported by a newprogramming interface,in which low-cost monitoring activitiesare deployed in normal mode of operation of the systemsto detect suspicious symptoms which are possibly, althoughnot necessarily, caused by security threats. This effort will lead to much more effective, yet affordable, securitymonitoring and defense on networked embedded systems,