CT-ISG: Compiler-Enabled Adaptive Security Monitoring on Networked Embedded Systems

CT-ISG：网络嵌入式系统上启用编译器的自适应安全监控

• 批准号: 0716271
• 负责人: Zhiyuan Li
• 金额: $ 40万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-07-01 至 2012-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0716271&HistoricalAwards=false
• 关键词: CT; ISG; Compiler; Enabled; Adaptive

CT-ISG: Compiler-Enabled Adaptive Security Monitoring on NetworkedEmbedded SystemsZhiyuan Li, Saurabh Bagchi, Yung-Hsiang LuDepartment of Computer Science,Department of Electrical and Electronic EngineeringPurdue UniversityHardware technologies have made steady progressin miniaturization of sensors and computing/communication devices,which has driven a trend towards pervasive computing, which is a wayto let computing devices directly interact with the physical world to monitorthe natural environment, to provide building safety, and so on.In order to make pervasive computing a reality,it is critical to secure the underlying networked embedded systems,because these systems may collect importantenvironment data upon which time-sensitive decisions are dependent.Unfortunately, many of networked embedded systems, e.g. wireless andwired sensor networks, RFID infrastructure, wireless mesh networks,have components or links that are openly exposed to potentialadversaries and hence are under constant security threats such as nodecapture, denial of service, and intrusion, among others. To make thematters worse, many networked embedded systems have much moreconstrained resources such as storage, bandwidth, computing power andenergy than computers used in non-embedded applications, e.g. desktopmachines and servers. Sophisticated computer security schemesdeveloped over the last few decades are often infeasible on networkedembedded systems, at least not in their original forms.The research team of this projectdevelops a multi-grade monitoring scheme, supported by a newprogramming interface,in which low-cost monitoring activitiesare deployed in normal mode of operation of the systemsto detect suspicious symptoms which are possibly, althoughnot necessarily, caused by security threats. This effort will lead to much more effective, yet affordable, securitymonitoring and defense on networked embedded systems,

CT-ISG：基于嵌入式系统的网络自适应安全监控Zhiyuan Li，Saurabh Bagchi，Yung-Hsiang Lu普渡大学电子电气工程系计算机科学系硬件技术在传感器和计算/通信设备的小型化方面取得了稳步进展，这推动了普适计算的趋势，这是一种让计算设备直接与物理世界交互以监控自然环境的方式，为了使普适计算成为现实，保护底层网络嵌入式系统是至关重要的，因为这些系统可能收集重要的时间敏感决策所依赖的信息。不幸的是，许多网络嵌入式系统，例如无线和有线传感器网络，RFID基础设施，无线网状网络，具有公开暴露给潜在对手的组件或链路，因此处于持续的安全威胁之下，例如，不可剥夺、拒绝服务和入侵等。 更糟糕的是，许多联网的嵌入式系统比非嵌入式应用中使用的计算机（如台式机和服务器）具有更多的资源约束，如存储、带宽、计算能力和能源。 过去数十年发展出来的先进计算机安全方案，往往无法在网络嵌入式系统上实施，至少在其原始形式下是不可行的。本项目的研究小组开发了一个多级监控方案，由一个新的编程接口支持，在系统的正常运行模式下部署低成本的监控活动，以检测可能（尽管不一定）由安全威胁引起的可疑症状。这一努力将导致更有效的，但负担得起的，安全监测和防御网络嵌入式系统，