TWC: Medium: Handling a Trillion Unfixable Flaws on Billions of Internet-of-Things

物联网(IoT)已迅速从概念转变为现实，预计2020年部署的IoT设备数量将上升至250亿。然而，研究表明，许多物联网设备存在严重的安全漏洞。此外，物联网设备的局限性和物联网设备网络的规模往往使传统的IT安全方法不切实际。该项目采用第一原则的方法来重新思考网络安全，并解决物联网网络的这些担忧：(1)简单边界防御的可扩展替代方案；(2)在部署的物联网设备网络中管理安全的新方法；以及(3)具有足够通用性的新安全策略，以在许多不同的使用案例中管理物联网设备和网络。通过提供保护物联网部署的原则性架构，该项目将帮助实现物联网的全部潜在社会效益。该项目将导致开发新的开源工具、建模抽象、算法和原型实现，以减少部署新物联网安全解决方案的时间，并将项目成果提供给社区。该项目的绩效指标将参与教育和外联活动，为新兴的物联网领域培训下一代人才。特别是，私人投资促进机构计划将跨学科的研究理念融入到涉及安全、网络、系统和网络物理系统的课程中。该项目还将积极鼓励代表性不足的群体参与。最后，该项目生成的工具和测量将告知并加速行业向安全无处不在的物联网部署过渡。

The Internet-of-Things (IoT) has quickly moved from concept to reality, with estimates that the number of deployed IoT devices will rise to 25 billion in 2020. However, studies show that many IoT devices have serious security vulnerabilities. Moreover, the limitations of IoT devices and scale of networks of IoT devices often make traditional IT security approaches impractical. This project takes a first-principles approach to rethinking network security and address these concerns for IoT networks: (1) scalable alternatives to simple perimeter defenses; (2) new methods to manage security in deployed networks of IoT devices; and (3) new security policies with sufficient generality to administer IoT devices and networks in many diverse use-cases. By providing a principled architecture to secure IoT deployments, the project will help realize the full potential societal benefits of IoT. The project will result in the development of novel open-source tools, modeling abstractions, algorithms, and prototype implementations that will reduce the time to deploy novel IoT security solutions, and make the results of the project available to the community. The project's PIs will engage in educational and outreach activities to train the next generation talent for the emerging area of IoT. In particular, the PIs plan to integrate the interdisciplinary research ideas into courses spanning security, networking, systems and cyber-physical systems. The project will also actively encourage participation from underrepresented groups. Finally, the tools and measurements generated by this project will inform and accelerate the industry transition to pervasive IoT deployments that are safe and secure.