NeTS: JUNO: Cognitive Security: A New Approach to Securing Future Large Scale and Distributed Mobile Applications

NetS：JUNO：认知安全：保护未来大规模分布式移动应用程序的新方法

• 批准号: 1405747
• 负责人: Thomas Hou
• 金额: $ 30万
• 依托单位: Virginia Polytechnic Institute and State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-05-01 至 2018-04-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1405747&HistoricalAwards=false
• 关键词: NeTS; JUNO; Cognitive; Security; New

Authentication is the first step in securing a networked application. Traditional authentication relies on cryptographic algorithms that verify users identify based on certain pre-configured secrets. In a world with "trillions" of mobile objects ("computation in everything") rigorous key management techniques are difficult, the traceability of pre-configured secrets is compromised, and crypto-based authentication schemes become ineffective.This project will investigate an alternative approach, referred to as cognitive security, to address this compelling problem. Cognitive security aims to supplement the crypto-based solutions with unique, unforgeable, and robust credentials that are inherent to the network entities such as mobile devices and users. For example, a location claim can be verified by a location "fingerprint" constructed from the ambient radio signals presented at the said location at the said time. A user's identity can be verified by knowledge the verifier learned from the user's online social networks. These credentials are physical properties of the mobile devices or knowledge naturally known to the users, which do not have to be pre-configured or remembered. Mechanisms will be developed so that these credentials can be collected or learnt through the normal network operations and be used to securely verify a device or a user's identity or claims. This is an international collaborative project, between US and Japan. The project will involve multiple areas of information technology, including security, wireless communications and networking, and machine learning. Cognitive security is a promising new approach to mobile network security where the security of the device or secrets stored in the device cannot be guaranteed.

身份验证是保护网络应用程序的第一步。传统的身份验证依赖于基于某些预先配置的秘密验证用户身份的加密算法。在一个拥有“数万亿”移动对象（“万物计算”）的世界中，严格的密钥管理技术是困难的，预先配置的秘密的可追溯性受到损害，基于加密的身份验证方案变得无效。这个项目将研究另一种方法，称为认知安全，来解决这个令人信服的问题。认知安全旨在为基于加密的解决方案提供独特的、不可伪造的、健壮的凭证，这些凭证是移动设备和用户等网络实体固有的。例如，位置要求可以通过位置“指纹”来验证，该位置“指纹”是根据在所述时间在所述位置呈现的环境无线电信号构建的。验证者可以通过从用户在线社交网络中获得的知识来验证用户的身份。这些凭证是移动设备的物理属性或用户自然知道的知识，不需要预先配置或记住。将开发机制，以便通过正常的网络操作收集或学习这些凭证，并用于安全地验证设备或用户的身份或索赔。这是一个美国和日本之间的国际合作项目。该项目将涉及多个信息技术领域，包括安全、无线通信和网络以及机器学习。认知安全是一种很有前途的移动网络安全新方法，设备的安全性或存储在设备中的机密无法保证。