I-Corps: Exploring Commercialization Opportunities for a Software-Defined Approach for Securing Internet of Things

这个I-Corps项目的广泛影响/商业潜力是双重的。首先，该项目可能导致开发实用的安全解决方案，这些解决方案需要充分释放物联网（IoT）的好处。虽然物联网预计到2020年将成为1.7万亿美元的市场，但由于安全问题，进展可能会受到限制。限制物联网的发展可能最终会限制潜在的社会和商业效益。其次，该项目如果成功，将通过保护数字资产和私人数据免受大规模网络攻击，对消费者、企业和关键基础设施产生积极影响。这个I-Corps项目起源于美国国家科学基金会资助的计算机网络和网络安全研究。I-Corps的经验将使我们更深入地了解市场需求和作为nsf资助研究的一部分开发的技术的好处，特别是应用于新兴的物联网部署。I-Corps项目解决了实现物联网安全产品的三个基本问题。首先，该项目将建立一个模型库，以统一的格式捕获各种物联网设备的预期（即安全）行为。其次，项目将启用一个新的策略抽象，操作人员在其中定义预期的策略。这种抽象捕获了相关的物理环境以及设备的上下文。第三，该项目将利用软件定义网络（SDN）和网络功能虚拟化（NFV）等新型网络模式实现的灵活的基于软件的安全设备，构建一个高度可扩展和轻量级的策略执行层。基于这些新颖的技术组件，该项目有可能在网络安全行业取得重大进展。

The broader impact/commercial potential of this I-Corps project is two-fold. First, this project may lead to the development of practical security solutions which are needed to fully unleash the benefits of the Internet of Things (IoT). While IoT is projected to be a 1.7 trillion dollar market by 2020, there is a likelihood that progress may be limited due to security concerns. Curtailing IoT progress may ultimately limit the potential societal and commercial benefits. Second, this project, if successful, will have a positive impact on consumers, businesses, and critical infrastructures by protecting digital assets and private data from large-scale cyber-attacks. This I-Corps project has its origins in NSF-funded research on computer networks and cybersecurity. The I-Corps experience will lead to a deeper understanding of the market requirements and benefits of the technologies that were developed as part of NSF-funded research, especially as applied to emerging IoT deployments.This I-Corps project project address three fundamental issues in realizing a product for securing IoT. First, the project will build a library of models that capture the expected (i.e., secure) behaviors of diverse IoT devices in a unified format. Second, the project will enable a novel policy abstraction where the operator defines the intended policies. This abstraction captures relevant physical environments as well as devices' contexts. Third, the project will build a highly scalable and light-weight policy enforcement layer using flexible software-based security appliances realized by new networking paradigms, namely, software-defined networking (SDN) and network functions virtualization (NFV). Based on these novel technological components, this project has the potential to lead to significant advances in the network security industry.