I-Corps: Exploring Commercialization Opportunities for a Software-Defined Approach for Securing Internet of Things

这个i-Corps项目的更广泛的影响/商业潜力是双重的。首先，该项目可能会导致开发出全面释放物联网(IoT)优势所需的实用安全解决方案。虽然物联网预计到2020年将成为一个价值1.7万亿美元的市场，但出于安全考虑，进展可能有限。阻碍物联网的进展可能最终会限制潜在的社会和商业利益。其次，该项目如果成功，将通过保护数字资产和私人数据免受大规模网络攻击，对消费者、企业和关键基础设施产生积极影响。这个i-Corps项目起源于NSF资助的关于计算机网络和网络安全的研究。I-Corps的经验将使我们更深入地了解作为NSF资助的研究的一部分而开发的技术的市场需求和好处，特别是应用于新兴的物联网部署。此i-Corps项目解决了实现产品以确保物联网安全的三个基本问题。首先，该项目将构建一个模型库，以统一格式捕获不同物联网设备的预期(即安全)行为。其次，该项目将实现一种新颖的策略抽象，其中运营商定义预期的策略。这种抽象可以捕获相关的物理环境以及设备的上下文。第三，该项目将使用通过新的网络模式(即软件定义网络(SDN)和网络功能虚拟化(NFV))实现的灵活的基于软件的安全设备来构建高度可扩展和轻量级的策略执行层。基于这些新的技术组件，该项目有可能导致网络安全行业的重大进步。

The broader impact/commercial potential of this I-Corps project is two-fold. First, this project may lead to the development of practical security solutions which are needed to fully unleash the benefits of the Internet of Things (IoT). While IoT is projected to be a 1.7 trillion dollar market by 2020, there is a likelihood that progress may be limited due to security concerns. Curtailing IoT progress may ultimately limit the potential societal and commercial benefits. Second, this project, if successful, will have a positive impact on consumers, businesses, and critical infrastructures by protecting digital assets and private data from large-scale cyber-attacks. This I-Corps project has its origins in NSF-funded research on computer networks and cybersecurity. The I-Corps experience will lead to a deeper understanding of the market requirements and benefits of the technologies that were developed as part of NSF-funded research, especially as applied to emerging IoT deployments.This I-Corps project project address three fundamental issues in realizing a product for securing IoT. First, the project will build a library of models that capture the expected (i.e., secure) behaviors of diverse IoT devices in a unified format. Second, the project will enable a novel policy abstraction where the operator defines the intended policies. This abstraction captures relevant physical environments as well as devices' contexts. Third, the project will build a highly scalable and light-weight policy enforcement layer using flexible software-based security appliances realized by new networking paradigms, namely, software-defined networking (SDN) and network functions virtualization (NFV). Based on these novel technological components, this project has the potential to lead to significant advances in the network security industry.