STTR Phase I: Security for Wireless Devices: Security Monitoring and Intrusion Detection in SDR and CR Using Power Fingerprinting

STTR 第一阶段：无线设备安全：使用电源指纹技术在 SDR 和 CR 中进行安全监控和入侵检测

• 批准号: 1217565
• 负责人: Carlos Aguayo-Gonzalez
• 金额: $ 15万
• 依托单位: Power Fingerprinting, Inc.
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-07-01 至 2013-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1217565&HistoricalAwards=false
• 关键词: STTR; Phase; Security; Wireless; Devices

This Small Business Technology Transfer Research (STTR) Phase I project will determine the technical and commercial feasibility of applying a technique called Power Fingerprinting (PFP) to monitor the execution integrity of software-defined and cognitive radio (SDR and CR) systems and detect malicious intrusions. SDR and CR technologies are the foundation for enhanced access to the radio spectrum, but they are inherently vulnerable to cyber attacks, which increases interference risks and complicates regulatory compliance. PFP uses side-channel information to assess the integrity of critical software modules that, if disrupted, can impact spectral emission and information security. The research objectives for Phase I include: 1) demonstrate the feasibility of characterizing critical SDR/CR modules using PFP; 2) define PFP system architecture to enhance SDR/CR security; 3) detect attacks to sections critical for spectrum access; and 4) integrate PFP monitoring into SDR/CR regulatory process. The research necessary to achieve these objectives will be performed using open-source tools and libraries to implement dynamic spectrum access approaches. At the end of Phase I, a blind-test demonstration of PFP detecting execution violations will be provided and serve as the baseline to continue this research into a Phase II project to provide a commercial prototype.The broader impact/commercial potential of this project includes the development of an innovative mechanism to protect SDR and CR systems and their enhanced spectrum access capabilities, mitigating interference risks due to malicious attacks. This Phase I project will introduce a new perspective to cyber security by treating it as a signal detection and classification problem and introducing tangible quantitative metrics for integrity and trust. SDR and CR are crucial to use the electromagnetic spectrum more efficiently. Therefore, it is of the utmost importance to effectively secure these devices, as they will be communicating sensitive information and supporting critical infrastructure, making them prime targets for cyber attacks. Commercially, this research has dual application in the commercial and defense wireless markets, particularly for resource-constrained and embedded platforms, including smart phones and tactical communication devices. The proposed approach has the potential to become a fundamental player in cyber-security by protecting the nation?s infrastructure and promoting further development of the economic base and employment. Furthermore, by allowing trustworthy deployment of SDR and CR technology, this research will help unleash the significant commercial opportunities that come with enhanced access to the radio spectrum.

该小型企业技术转移研究(STTR)第一阶段项目将确定应用名为功率指纹(PFP)的技术的技术和商业可行性，以监控软件定义和认知无线电(SDR和CR)系统的执行完整性，并检测恶意入侵。SDR和CR技术是增强无线电频谱使用的基础，但它们天生就容易受到网络攻击，这增加了干扰风险，并使监管合规性复杂化。PFP使用旁通道信息来评估关键软件模块的完整性，如果中断，可能会影响光谱发射和信息安全。第一阶段的研究目标包括：1)论证使用PFP表征关键SDR/CR模块的可行性；2)定义PFP系统架构以增强SDR/CR安全性；3)检测对频谱接入至关重要的部分的攻击；以及4)将PFP监控整合到SDR/CR监管过程中。实现这些目标所需的研究将使用开放源码工具和库来实施动态频谱接入方法。在第一阶段结束时，将提供PFP检测执行违规的盲测演示，并作为基准继续这项研究进入第二阶段项目，以提供商业原型。该项目的更广泛影响/商业潜力包括开发一种创新机制，以保护SDR和CR系统及其增强的频谱接入能力，降低恶意攻击造成的干扰风险。该第一阶段项目将通过将网络安全视为信号检测和分类问题，并为完整性和信任度引入有形的量化度量，从而引入网络安全的新视角。SDR和CR对于更有效地利用电磁频谱至关重要。因此，有效保护这些设备的安全至关重要，因为它们将通信敏感信息并支持关键基础设施，使其成为网络攻击的主要目标。在商业上，这项研究在商业和国防无线市场具有双重应用，特别是在资源受限和嵌入式平台上，包括智能手机和战术通信设备。通过保护国家S的基础设施，促进经济基础和就业的进一步发展，拟议中的方法有可能成为网络安全的基本参与者。此外，通过允许可靠地部署SDR和CR技术，这项研究将有助于释放随着更好地获得无线电频谱而带来的重大商业机会。