TWC: Large: Collaborative: Living in the Internet of Things

TWC：大型：协作：生活在物联网中

• 批准号: 1565252
• 负责人: Tadayoshi Kohno
• 金额: $ 120万
• 依托单位: University of Washington
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-08-01 至 2022-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1565252&HistoricalAwards=false
• 关键词: TWC; Large; Collaborative; Living; Internet

More and more objects used in daily life have Internet connectivity, creating an "Internet of Things" (IoT). Computer security and privacy for an IoT ecosystem are fundamentally important because security breaches can cause real and significant harm to people, their homes, and their community. These security issues also are very challenging not only because of the properties of IoT devices themselves but also because the users are diverse, vary in their technical knowledge and access to technical support, and include vulnerable populations such as children and those using in-home care technologies. Moreover, additional risks emerge when users combine technologies in unexpected ways. Meeting the challenges of IoT security and privacy requires a large, interdisciplinary effort. An effective approach to IoT security and privacy is holistic, integrating human-computer interaction, network security, cryptography, and pervasive computing. Enforcing cryptographic requirements requires not only building systems that can function on low-capacity IoT devices, but also using threat models that incorporate human requirements. Translating security and privacy requirements and preferences requires understanding what people want, presenting the technologies in a manner people can understand, and knowing what is technologically realistic. This requires behavioral and organizational research, with discussions involving public and private sector stakeholders. The project is developing a foundation for IoT security and privacy that is intuitive, natural to the human experience, provides the necessary technical guarantees, and facilitates adoption by the larger IoT community of users and manufacturers.

日常生活中使用的越来越多的物体具有互联网连接性，从而创建了“物联网”（IoT）。物联网生态系统的计算机安全和隐私至关重要，因为安全漏洞可能会对人们、他们的家庭和社区造成真实的重大伤害。这些安全问题也非常具有挑战性，不仅因为物联网设备本身的属性，而且因为用户是多样化的，他们的技术知识和获得技术支持的方式各不相同，包括儿童和使用家庭护理技术的人等弱势群体。 此外，当用户以意想不到的方式结合联合收割机技术时，会出现额外的风险。应对物联网安全和隐私的挑战需要大量的跨学科努力。物联网安全和隐私的有效方法是全面的，整合人机交互，网络安全，密码学和普适计算。执行加密要求不仅需要构建可以在低容量物联网设备上运行的系统，还需要使用包含人类需求的威胁模型。翻译安全和隐私要求和偏好需要了解人们想要什么，以人们可以理解的方式呈现技术，并了解技术上的现实。这需要行为和组织研究，并与公共和私营部门利益相关者进行讨论。 该项目正在为物联网安全和隐私开发一个直观、自然的基础，提供必要的技术保证，并促进更大的物联网用户和制造商社区的采用。