STTR Phase II: Security Monitoring and Intrusion Detection in SDR and CR Using Power Fingerprinting

STTR 第二阶段：使用功率指纹识别在 SDR 和 CR 中进行安全监控和入侵检测

• 批准号: 1430728
• 负责人: Carlos Aguayo-Gonzalez
• 金额: $ 74.99万
• 依托单位: Power Fingerprinting, Inc.
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-09-01 至 2017-11-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1430728&HistoricalAwards=false
• 关键词: STTR; Phase; II; Security; Monitoring

The broader impact/commercial potential of this project is the development of an innovative cyber security solution based on Power Fingerprinting (PFP) for vulnerable wireless networking equipment and smart grid infrastructure. PFP can prevent well-funded adversaries from compromising these critical systems and operate without being discovered. The PFP monitor can assess the integrity directly on the target platforms, including those for which there is no commercial solution available. PFP can be applied to a variety of embedded platform and can coexist with traditional cyber security solutions adding an extra layer of protection in a defense-in-depth approach. These characteristics make PFP capable of detecting sophisticated attacks, such as the recent Stuxnet worm. Traditional peripheral cyber security approaches, such as anti-virus and firewalls, are being adapted for the target platforms but with limited success. PFP addresses a growing need to secure critical infrastructure, such as communications and power generation and distribution, and directly monitor their execution. PFP has dual application in the commercial and government cybersecurity markets, particularly for resource-constrained and embedded platforms. PFP has the potential to become a fundamental player in cyber-security by protecting the nation?s infrastructure and promoting further development of the economic base and employment.This Small Business Technology Transfer Research (STTR) Phase 2 project aims to demonstrate a commercial prototype of a novel cyber security solution for wireless network infrastructure and Smart Grid applications based on a novel approach called Power Fingerprinting (PFP). PFP provides integrity assessment and intrusion detection for embedded and resource-constrained platforms by using an external device to monitor side-channel information and applying signal processing techniques to determine the execution status of a processor. Due to computational resource constraints, the application of traditional cyber security solutions to the proposed target applications is very limited. Furthermore, there are no commercial solutions available capable of directly monitoring the execution and detecting intrusions in networking equipment, such as wireless routers, or control systems used in the Smart Grid. The objectives of this Phase 2 effort include: 1) Demonstrate a PFP monitor commercial prototype for wireless network and Smart Grid platforms, 2) Leverage PFP tools to enhance automatic characterization on target platforms, and 3) Integrate suitable mechanisms to improve timing synchronization. At the end of Phase 2, a blind test demonstration of the prototype PFP monitor detecting malicious intrusions will be provided and serve as the launching pad into commercialization.

该项目更广泛的影响/商业潜力是开发基于功率指纹（PFP）的创新网络安全解决方案，用于脆弱的无线网络设备和智能电网基础设施。PFP可以防止资金充足的对手破坏这些关键系统，并在不被发现的情况下运行。PFP监控器可以直接在目标平台上评估完整性，包括那些没有商业解决方案的平台。PFP可应用于各种嵌入式平台，并可与传统网络安全解决方案共存，以深度防御方法添加额外的保护层。这些特征使得PFP能够检测复杂的攻击，例如最近的Stuxnet蠕虫。传统的外围网络安全方法，如防病毒和防火墙，正在适应目标平台，但成功有限。私营部门筹资和伙伴关系司满足日益增长的需要，以确保通信、发电和配电等关键基础设施的安全，并直接监测其执行情况。PFP在商业和政府网络安全市场具有双重应用，特别是对于资源受限和嵌入式平台。PFP有可能通过保护国家而成为网络安全的基本参与者？这个小型企业技术转移研究（STTR）第二阶段项目旨在展示一种新型网络安全解决方案的商业原型，该解决方案基于一种称为功率指纹（PFP）的新方法，用于无线网络基础设施和智能电网应用。PFP通过使用外部设备来监视侧信道信息并应用信号处理技术来确定处理器的执行状态，为嵌入式和资源受限的平台提供完整性评估和入侵检测。由于计算资源的限制，传统的网络安全解决方案在目标应用中的应用非常有限。此外，还没有能够直接监视网络设备（例如无线路由器或智能电网中使用的控制系统）中的执行和检测入侵的商业解决方案。第二阶段工作的目标包括：1）演示无线网络和智能电网平台的PFP监视器商业原型，2）利用PFP工具增强目标平台的自动表征，以及3）集成适当的机制以改进定时同步。在第2阶段结束时，将提供PFP监视器原型的盲测演示，以检测恶意入侵，并作为商业化的发射台。