CPS: Breakthrough: Secure Interactions with Internet of Things

本研究的目的是：(1)深入了解物联网（IoT）部署中保护交互的挑战，(2)开发一个实用框架，减轻物联网交互的安全和隐私威胁，以及(3)在中等规模的物联网测试平台和通过用户研究验证所提出的框架。新兴的物联网计算范式通过实现用户、传感器和执行器之间的交互，有望在几乎所有领域实现新的应用。这些交互可以采取设备对设备（例如，低功耗蓝牙（BLE））或人对设备（例如，语音控制）的形式。通过利用这些交互界面中的漏洞，攻击者可以未经授权访问物联网，从而实现跟踪、分析并对用户造成伤害。随着成千上万不同的物联网制造商，开发人员和设备的出现，确保所有设备在生产过程中得到适当的保护并在生产后保持最新状态是非常具有挑战性的，如果不是不可能的话。物联网用户和管理员必须信任一组设备，最不安全的设备会破坏安全链。通过将信任基础从各种制造商和开发人员转移到用户控制下的单一框架，部署物联网设备将更加可行，更不容易受到攻击。这将有助于增进国民的健康、繁荣和福祉，也有助于保障国防。确保物联网接口表面作为案例研究将整合到研究生水平的课程中，并用于培训（特别是代表性不足和女性）具有跨学科主题的学生，这些主题需要理论和实践的平衡组合，从而在国家需要的领域开发人力资源。拟议的研究还将显著促进对物联网交互表面安全挑战的理解，从而促进科学的进步。该项目将确定当前和未来物联网部署中安全交互的总体方向。在无法正确内置和维护安全性的情况下，它将提供额外的保护层。

The objective of this research is to (1) gain insights into the challenges of securing interactions in Internet of Things (IoT)deployments, (2) develop a practical framework that mitigates security and privacy threats to IoT interactions, and (3) validate the proposed framework in a medium-scale IoT testbed and through user studies. The emerging IoT computing paradigm promises novel applications in almost all sectors by enabling interactions between users, sensors, and actuators. These interactions can take the form of device-to-device (e.g., Bluetooth Low Energy (BLE)) or human-to-device (e.g., voice control). By exploiting vulnerabilities in these interaction surfaces, an adversary can gain unauthorized access to the IoT, which enables tracking, profiling and posing harm to the user. With the thousands of diverse IoT manufacturers, developers, and devices, it is very challenging, if not impossible, to ensure all devices are properly securedat production and kept up-to-date after production. IoT users and administrators have to place their trust in a set of devices, with the least secure device breaking the security chain. By shifting the trust base from the various manufacturers and developers to a single framework under the user's control, deploying IoT devices will be more feasible and less vulnerable. The proposed framework will help advance the national health, prosperity and welfare, and also secure the national defense. Securing IoT interface surfaces as case studies will be integrated in graduate-level courses, and used to train (especially underrepresented and female) students with interdisciplinary topics that require a balanced mix of theory and practice, thus developing human resources in the nationally needed areas.The proposed research will also significantly advance the understanding of the challenges to secure IoT interaction surfaces in practice, thus promoting the progress of science. This project will establish a general direction to secure interactions in the current and future IoT deployments. It will offer an additional protection layer in the cases where security cannot be properly built-in and maintained.