I-Corps: Exploring Commercialization Opportunities for a Software-Defined Approach for Securing Internet of Things

这个I-Corps项目更广泛的影响/商业潜力是双重的。首先，该项目可能会导致开发实用的安全解决方案，以充分发挥物联网（IoT）的优势。虽然物联网预计到2020年将成为1.7万亿美元的市场，但由于安全问题，进展可能会受到限制。阻碍物联网的发展可能最终会限制潜在的社会和商业利益。第二，该项目如果成功，将通过保护数字资产和私人数据免受大规模网络攻击，对消费者、企业和关键基础设施产生积极影响。这个I-Corps项目起源于NSF资助的计算机网络和网络安全研究。I-Corps的经验将有助于更深入地了解作为NSF资助研究的一部分而开发的技术的市场需求和优势，特别是应用于新兴物联网部署。这个I-Corps项目项目解决了实现物联网安全产品的三个基本问题。首先，该项目将构建一个模型库，以捕获预期的（即，安全）行为的各种物联网设备的统一格式。其次，该项目将启用一种新的策略抽象，其中运营商定义了预期的策略。这种抽象捕获相关的物理环境以及设备的上下文。第三，该项目将使用由新的网络范式（即软件定义网络（SDN）和网络功能虚拟化（NFV））实现的灵活的基于软件的安全设备来构建高度可扩展和轻量级的策略执行层。基于这些新的技术组件，该项目有可能导致网络安全行业的重大进步。

The broader impact/commercial potential of this I-Corps project is two-fold. First, this project may lead to the development of practical security solutions which are needed to fully unleash the benefits of the Internet of Things (IoT). While IoT is projected to be a 1.7 trillion dollar market by 2020, there is a likelihood that progress may be limited due to security concerns. Curtailing IoT progress may ultimately limit the potential societal and commercial benefits. Second, this project, if successful, will have a positive impact on consumers, businesses, and critical infrastructures by protecting digital assets and private data from large-scale cyber-attacks. This I-Corps project has its origins in NSF-funded research on computer networks and cybersecurity. The I-Corps experience will lead to a deeper understanding of the market requirements and benefits of the technologies that were developed as part of NSF-funded research, especially as applied to emerging IoT deployments.This I-Corps project project address three fundamental issues in realizing a product for securing IoT. First, the project will build a library of models that capture the expected (i.e., secure) behaviors of diverse IoT devices in a unified format. Second, the project will enable a novel policy abstraction where the operator defines the intended policies. This abstraction captures relevant physical environments as well as devices' contexts. Third, the project will build a highly scalable and light-weight policy enforcement layer using flexible software-based security appliances realized by new networking paradigms, namely, software-defined networking (SDN) and network functions virtualization (NFV). Based on these novel technological components, this project has the potential to lead to significant advances in the network security industry.