Security and Software Engineering Research Center (S2ERC) at Virginia Tech - Phase 2

该项目支持弗吉尼亚理工大学成为安全和软件工程研究中心(S2ERC)行业/大学合作研究中心(I/UCRC)的成员。S2ERC的使命是就其成员感兴趣的软件安全、系统安全和软件技术问题进行应用和基础研究。这项研究的目标是在成员组织内部实现安全和软件技术收益。弗吉尼亚理工大学的网站专门关注网络物理系统的软件和安全挑战，特别强调关键基础设施和物联网等新兴领域。利用这些技术应对安全和隐私挑战，对于保护国土安全和在日益相互联系的世界中维护公民自由至关重要。通过该计划执行的研究将主要由作为成员加入该联盟的行业合作伙伴提供资金，目标是为由此产生的创新发展商业化道路。此外，将在项目上得到支持的学生将深入了解与行业直接相关的现实世界问题，并将建立能够在竞争日益激烈的技术学科中导致招聘和未来职业安置的关系。最终，解决的具体技术问题和考虑的方法将由为S2ERC提供治理的行业咨询委员会(IAB)决定。然而，弗吉尼亚理工大学寻求专注于招募和维持对网络物理系统的安全和隐私挑战特别感兴趣的成员。鉴于教职员工和研究人员的经验，预计所进行的研究将利用嵌入式系统、控制系统和无线系统安全方面的深厚专业知识。在嵌入式系统领域，我们将开发和利用程序分析和软件合成工具，为嵌入式设备开发经证明安全可靠的固件。对于控制系统，我们将寻求将计算机网络防御中常见的功能转换为嵌入式控制网络中用于检测和阻止异常控制信号的组件。在无线区域内，我们寻求确保网络内的弹性，以使中断无线基础设施的尝试对使用网络的关键功能的影响降至最低。在更大的中心的保护伞下，我们寻求将这些概念综合到工具和技术中，这些工具和技术可以超越每个概念，以便解决系统和系统系统的整体安全问题。最后，我们试图了解这些网络物理系统中的人的因素，并努力确保安全技术与用户体验相结合，并在现实世界的部署中有效。

This project supports Virginia Tech's membership in the Security and Software Engineering Research Center (S2ERC) Industry/University Cooperative Research Center (I/UCRC). The mission of S2ERC is to conduct a program of applied and basic research on software security, system security, and software technology problems of interest to its members. The goal of this research is to enable security and software technology gains within member organizations. Virginia Tech's site specifically focuses on challenges with software and security for cyber-physical systems, with a particular emphasis on the emerging areas of critical infrastructure and the Internet of Things. Addressing security and privacy challenges with these technologies are critical to protecting homeland security and preserving civil liberties in an increasingly interconnected world. Research executed through this program will be principally funded by industry partners who join the consortium as members, with the goal of developing commercialization paths for resulting innovation. Additionally students who will be supported on projects will gain insight into real-world problems of direct interest to industry, and will forge relationships that can lead to recruiting and future career placement in an increasingly competitive technology discipline.Ultimately the specific technical problems tackled and approaches considered will be determined by the Industry Advisory Board (IAB) who provides governance for S2ERC. However Virginia Tech seeks to focus on recruiting and sustaining members with a specific interest in the security and privacy challenges with cyber-physical systems. Given the experience of the faculty and researchers involved, research undertaken is expected to leverage deep expertise in security for embedded systems, control systems, and wireless systems. Within the embedded systems domain, we will develop and leverage tools in program analysis and software synthesis to develop provably safe and secure firmware for embedded devices. For control systems we will seek to translate functions typically found in the defense of computer networks into components used in embedded control networks to detect and block anomalous control signaling. Within the wireless area, we seek to ensure resilience within networks such that attempts to disrupt wireless infrastructure have minimal effect on critical functions using the network. With the umbrella of the larger center, we seek to synthesize these concepts into tools and techniques that can transcend each in order to address security overall for systems and systems of systems. Lastly we seek to understand the human element in these cyber-physical systems and work to ensure security technologies integrate with the user experience and are effective in real-world deployments.