MRI: Acquisition of Equipment to Establish Mobile Testing Infrastructure for Bring Your Own Device Research and Education

提案#：13-37529PI(S)：王勇机构：达科他州立大学标题：核磁共振/Acq.：建立移动测试基础设施的设备-自带设备用于研究和教育项目建议：该项目研究自带设备(BYOD)安全的基本问题，旨在找到更好的方法来保护企业和校园网络。-利用网络性能指标(移动渗透测试和预警入侵检测系统)开发恶意软件的移动预警入侵检测系统(IDS)，-开发秘密共享计划以保护和共享BYOD(算法)上的敏感数据保管，以及-使用BYOD上的秘密共享计划建立安全区(BYODLib)。这些研究目标预计将为网络操作和网络安全方面的教育带来相应的机会。此外，还寻求两个教育目标：-扩大实验室作业/课堂项目，以支持移动安全设备(延长实验任务)和-提高研究生产力，并加强对选择移动辅修专业的本科生的移动安全教育(加强对移动设备的研究和教育)。该项目将渗透到移动设备。新兴的移动渗透测试区域可以识别移动设备中的未知漏洞。尽管面临挑战，保护自带设备上的敏感数据对于保护企业和园区网络至关重要。一种基于秘密数据的新方案可以用于保护敏感数据和离线数据，因为它可能允许网络管理员禁用用户？访问权限，即使数据位于自带设备上。基于秘密共享方案的自带设备库应使移动应用程序能够在移动设备上建立安全区域并保护敏感数据。广泛影响：该工具将向该州其他机构的教职员工和学生开放。该项目符合南达科他州？S以信息技术、网络安全和信息保障为重点的相关技术计划的优先事项。基础设施应该提高移动设备的研究效率，并加强本科生和研究生的移动安全教育。该机构是美国仅有的四所在信息保障教育(CAE-IASE)、研究(CAE-R)和网络运营(CAE-CO)领域获得NSA认可的学校之一。该仪器应有助于开展自带设备安全研究，并为EPSCoR州的网络安全和运营教育提供新的机会。

Proposal #: 13-37529PI(s): Wang, YongInstitution: Dakota State University Title: MRI/Acq.: Equipment to Establish a Mobile Testing Infrastructure- Bring Your Own Device for Research and EducationProject Proposed:This project, studying fundamental issues in Bringing Your Own Device (BYOD) security, aims to identify better approaches to protect enterprise and campus networks. The following objectives are pursued:- Creating tools to facilitate mobile penetration testing, and - Developing a mobile early warning Intrusion Detection System (IDS) for malware utilizing network performance metrics (mobile penetration test and early warning IDS,- Developing secret sharing schemes to protect and share custody of sensitive data on BYODs (algorithms), and- Establishing secure zones using secret sharing schemes on BYODs (BYODLib).These research objectives are expected to lead to corresponding opportunities for education in cyber operations and cyber security. Moreover, two educational objectives are also sought: To- Extend laboratory assignments/class projects to support mobile security devices (extend lab assignments) and- Increase research productivity and enhance education on mobile security for undergraduate students selecting the mobile minor (strengthen research and education on mobile devices).This project extends penetration to mobile devices. The emerging mobile-penetration testing area enables identification of unknown vulnerabilities in a mobile device. Notwithstanding the challenge, protecting sensitive data on BYOD is essential to protect enterprise and campus networks. A novel scheme based on secret data could be used to protect sensitive data as well as offline data, as it is likely to allow network administrators to disabled users? access even if the data is on BYOD. The BYOD library based on a secret sharing scheme should enable mobile applications to establish secure zones on mobile devices and protect sensitive data.Broader Impacts: The instrumentation will be made available to faculty and students from other institutions in the state. The project meets the priority of South Dakota?s Relevant and Technology Plan focusing on information technology, cyber security, and information assurance. The infrastructure should increase the research productivity on mobile devices and enhance education on mobile security for both undergraduate and graduate students. The institution is one of only four schools in the nation with NSA recognition in Information Assurance Education (CAE-IASE), Research (CAE-R), and Cyber Operations (CAE-CO). The instrumentation should contribute to conduct research in BYOD security and provide new opportunities for education on cyber security and operations in an EPSCoR state.