SDCI: Integrated Simulation and Emulation Platform for Security Experimentation

网络物理系统(CP)的可信性是一个重要问题，因为此类系统通常用于关键环境。目前，CPS的许多组件都是在没有足够形式化和分析的属性和保证的情况下构建的。系统设计阶段的这种不足之处可能会导致业务中的灾难性后果，因为它们与开放网络互连，并越来越容易受到安全攻击。对于快速增长的应用，迫切需要在现实环境中使用模拟和仿真对网络和物理系统进行联合和整体评估，这带来了对CP防御能力的现实攻击。为了满足这一需求，本项目提出建立ISEE集成的安全实验仿真平台，作为用于网络安全研发的软件支撑研究基础设施。ISEE允许对CP进行并发建模、实验和评估，范围从完全模拟到完全实现的系统。ISEE有两个主要组成部分：1)用于系统规格说明和实验配置的建模环境；2)支持实验执行的运行环境。ISEE采用模型集成计算(MIC)方法，该方法在整个实验环境中显式使用模型，并在特定于领域的模型级别集成它们。虽然ISEE将主要用于CPS领域，但用于系统系统建模和安全攻击建模的元模型将在基本级别上开发，以便它们将可推广到许多具有类似安全评估需求的领域。ISEE将为CPS研究人员提供一种工具，以评估CPS的安全属性。它将为建筑安全作为早期CPS设计的关键属性奠定基础，并促进计算机科学和其他工程领域之间的跨学科研究和教育。

Trustworthiness of cyberphysical systems (CPS) is an essential concern since such systems are routinely employed in critical settings. Currently many components of CPS are built without sufficiently formalized and analyzed properties and guarantees. Such inadequacies in the system design phase can lead to catastrophic consequences in operations, as they are interconnected to open networks and become increasingly exposed to security attacks. There is a pressing need to evaluate both cyber- and physical systems together and holistically for a rapidly growing number of applications using simulation and emulation in a realistic environment, which brings realistic attacks against the defensive capabilities of CPS. To address this need, this project proposes to build iSEE - integrated Simulation and Emulation platform for security Experimentation, as a software supporting research infrastructure used for cyber security research and development. iSEE allows for the concurrent modeling, experimentation and evaluation of CPS that range from a fully simulated to a fully implemented system. iSEE has two major components: 1) modeling environment for system specification and experiment configuration and 2) run-time environment that supports experiment execution. iSEE employs the Model-Integrated-Computing (MIC) approach, which explicitly uses models throughout the experiment environments and integrates them at the domain-specific model level. Though iSEE will be primarily used in the CPS domain, the meta-models for system-of-systems modeling and security attack modeling will be developed at a fundamental level, such that they will be generalizable to many domains with similar security assessment needs. iSEE will provide CPS researchers a tool to evaluate CPS with respect to their security properties. It will set the stage for building security as a key property in early CPS design and promote interdisciplinary research and education between computer science and other engineering domains.