SBIR Phase II: Cyber Security Monitoring for Critical Embedded and Wireless Systems Using Power Fingerprinting

SBIR 第二阶段：使用电源指纹识别关键嵌入式和无线系统的网络安全监控

• 批准号: 1330970
• 负责人: Carlos Aguayo-Gonzalez
• 金额: $ 49.98万
• 依托单位: Power Fingerprinting, Inc.
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-09-15 至 2017-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1330970&HistoricalAwards=false
• 关键词: SBIR; Phase; II; Cyber; Security

This Small Business Innovation Research (SBIR) Phase II project should provide a novel cyber security solution for Industrial Control Systems (ICS) based on Power Fingerprinting (PFP) technology. PFP provides integrity assessment and intrusion detection for embedded and resource-constrained platforms by using an external device to monitor side-channel information and applying signal processing techniques to determine the execution status of a processor. Because PFP monitoring is performed by an external device, it can be applied to platforms with constrained computational resources, such as Industrial Control Systems, for which solutions based on traditional cyber security approaches are practically inexistent. There are no commercially available solutions capable of monitoring the execution and detecting intrusions directly in core ICS elements, such as Programmable Logic Controllers (PLCs). The objectives of this Phase II effort include: 1) Develop a PFP monitor prototype for ICS by integrating commercially available components, 2) Develop the necessary software tools to support ICS monitoring, and 3) Validate the prototype using representative ICS platforms used in critical infrastructure. At the end of Phase II, the prototype PFP monitor will be demonstrated detecting malicious intrusions in blind tests, serving as stepping stone to bring this technology into commercialization.The broader/commercial impact of this project is the development of an innovative cyber security solution for ICS in critical infrastructure. PFP can prevent well-funded adversaries from compromising critical systems without being discovered. The PFP monitor can assess the integrity of core elements in ICSs for which there are no commercial solutions available. PFP can be applied to embedded platforms and can coexist with traditional cyber security solutions adding an extra layer of protection in a defense-in-depth approach. These characteristics make PFP a powerful tool for detecting sophisticated covert attacks to ICS, such as the recent Stuxnet worm. Traditional cyber security approaches, such as anti-virus and firewalls, are being adapted for ICS with very limited success. Thus, PFP addresses a growing need to secure ICSs in critical infrastructure and directly monitor their execution. PFP has dual application in the commercial and government markets, particularly for resource-constrained and embedded platforms. PFP has the potential to become a fundamental player in cyber-security by protecting the nation?s infrastructure and promoting further development of the economic base and employment.

这个小型企业创新研究（SBIR）第二阶段项目将为基于电源指纹（PFP）技术的工业控制系统（ICS）提供一种新的网络安全解决方案。PFP通过使用外部设备来监视侧信道信息并应用信号处理技术来确定处理器的执行状态，为嵌入式和资源受限的平台提供完整性评估和入侵检测。由于PFP监控由外部设备执行，因此它可以应用于计算资源受限的平台，例如工业控制系统，基于传统网络安全方法的解决方案实际上是不存在的。没有能够直接在核心ICS元件（诸如可编程逻辑控制器（PLC））中监视执行和检测入侵的商业上可用的解决方案。这一第二阶段工作的目标包括：（1）通过整合商业上可获得的组件，为综合控制系统开发一个私营部门筹资和伙伴关系监测器原型;（2）开发必要的软件工具，以支持综合控制系统监测;（3）使用关键基础设施中使用的代表性综合控制系统平台，对原型进行升级。在第二阶段结束时，原型PFP监视器将在盲测中检测恶意入侵，作为将该技术商业化的垫脚石。该项目的更广泛/商业影响是为关键基础设施中的ICS开发创新的网络安全解决方案。PFP可以防止资金充足的对手在不被发现的情况下破坏关键系统。私营部门筹资和伙伴关系监测员可以评估没有商业解决办法的国际通信系统核心要素的完整性。PFP可以应用于嵌入式平台，并可以与传统的网络安全解决方案共存，以深度防御的方式增加额外的保护层。这些特性使PFP成为检测复杂的ICS隐蔽攻击的强大工具，例如最近的Stuxnet蠕虫。传统的网络安全方法，如防病毒和防火墙，正在适应ICS，但成功率非常有限。因此，私营部门筹资和伙伴关系司满足了日益增长的在关键基础设施中保障信息通信系统安全并直接监测其执行情况的需要。PFP在商业和政府市场中具有双重应用，特别是对于资源受限和嵌入式平台。PFP有可能通过保护国家而成为网络安全的基本参与者？加强基础设施建设，促进经济基础和就业的进一步发展。