CT-ISG: Compiler-Enabled Adaptive Security Monitoring on Networked Embedded Systems

CT-ISG：网络嵌入式系统上启用编译器的自适应安全监控

• 批准号: 0716271
• 负责人: Zhiyuan Li
• 金额: $ 40万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-07-01 至 2012-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0716271&HistoricalAwards=false
• 关键词: CT; ISG; Compiler; Enabled; Adaptive

CT-ISG: Compiler-Enabled Adaptive Security Monitoring on NetworkedEmbedded SystemsZhiyuan Li, Saurabh Bagchi, Yung-Hsiang LuDepartment of Computer Science,Department of Electrical and Electronic EngineeringPurdue UniversityHardware technologies have made steady progressin miniaturization of sensors and computing/communication devices,which has driven a trend towards pervasive computing, which is a wayto let computing devices directly interact with the physical world to monitorthe natural environment, to provide building safety, and so on.In order to make pervasive computing a reality,it is critical to secure the underlying networked embedded systems,because these systems may collect importantenvironment data upon which time-sensitive decisions are dependent.Unfortunately, many of networked embedded systems, e.g. wireless andwired sensor networks, RFID infrastructure, wireless mesh networks,have components or links that are openly exposed to potentialadversaries and hence are under constant security threats such as nodecapture, denial of service, and intrusion, among others. To make thematters worse, many networked embedded systems have much moreconstrained resources such as storage, bandwidth, computing power andenergy than computers used in non-embedded applications, e.g. desktopmachines and servers. Sophisticated computer security schemesdeveloped over the last few decades are often infeasible on networkedembedded systems, at least not in their original forms.The research team of this projectdevelops a multi-grade monitoring scheme, supported by a newprogramming interface,in which low-cost monitoring activitiesare deployed in normal mode of operation of the systemsto detect suspicious symptoms which are possibly, althoughnot necessarily, caused by security threats. This effort will lead to much more effective, yet affordable, securitymonitoring and defense on networked embedded systems,

CT-ISG：对网络上的Systemszhiyuan Li，Saurabh Bagchi，Yung-Hsiang计算机科学的Ludepartment，电气和电子工程系大学Hardue UniversityHardware Technologies的计算机科学系的计算机和计算的趋势，这使得趋势的趋势，该趋势是使这一趋势的趋势，计算设备直接与物理世界互动以监视自然环境，提供建筑安全性等等。为了使普遍计算成为现实，至关重要的是，确保基本的网络嵌入式系统确保，因为这些系统可能会收集重要的环境数据，以获取时间敏感的数据，这些数据是依赖的。 无线和连接的传感器网络，RFID基础架构，无线网状网络，具有公开接触势不足的组件或链接，因此受到持续的安全威胁，例如NodeCapture，拒绝服务和入侵等。 为了使它们变得更糟，许多网络嵌入式系统具有与非嵌入式应用程序中使用的计算机相比，诸如存储，带宽，计算功率和伦敦的诸如存储，带宽，计算功率和势的资源很多，例如台式机和服务器。 在过去的几十年中，在网络贴上的系统上通常不可行，至少没有以其原始形式进行复杂的计算机安全计划，通常是不可行的。该项目开发的研究团队是一种多级监控方案，由新的计划界面支持，该界面在一个正常的系统中受到了可疑症状的范围，在这种界面中，该界面可能会导致构成症状，从而可能导致构成症状，这可能是可能的。这项工作将导致在网络嵌入式系统上更有效，但负担得起的安全性监控和防御，