权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

CAREER: Transforming Residential Networks into Security Assets

职业：将住宅网络转变为安全资产

基本信息

批准号：
1651540
负责人：
Craig Shue
金额：
$ 50.79万
依托单位：
Worcester Polytechnic Institute
依托单位国家：
美国
项目类别：
Continuing Grant
财政年份：
2017
资助国家：
美国
起止时间：
2017-07-01 至 2023-06-30
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=1651540&HistoricalAwards=false
关键词：
CAREER Transforming Residential Networks into

项目摘要

Residential computer networks are often insecure because they are unable to apply the best practices employed in corporate networks. The general public, who are often responsible for administering these networks, may lack the financial resources or computing expertise to deploy state-of-the-art network security systems. As a result, residential networks often offer little resistance to fraud and compromise. Further, these networks can enable infiltrations into corporate networks when users bring their mobile devices from the home to the corporate network. The rise of Internet-enabled embedded devices, such as household appliances and electrical power switches, can exacerbate these problems since a compromise can affect the residence's physical environment. To address these risks, this project will explore new mechanisms to send network traffic through security enforcement systems located outside the residence to carefully screen for attacks, both to traditional computers and to Internet-enabled embedded devices. The project's goal is to create new techniques that can improve security for the millions of residential computer networks in the United States.The researchers will create a system to answer research questions surrounding the effectiveness, efficiency, performance, scalability, costs and incentives of delegating network security decisions to an external third-party security provider. Using an array of cloud-hosted security middleboxes, the researchers will measure the network latency and impact on bandwidth associated tunneling residential network traffic through these middleboxes before sending the traffic to its destination. The researchers will evaluate how new security mechanisms can be introduced at these middleboxes and how existing security protocols can be fortified in this model. The project will further explore how to detect and create custom security filters for Internet-enabled embedded devices to protect them attempts to exploit vulnerabilities that may be present on the devices. The researchers will explore generalizable models that can apply to embedded devices that have similar network interaction patterns to enable support for a large number of devices. Finally, the researchers will explore the potential for a new subfield of deployable residential network security. The researchers will examine which types of techniques are compatible with external third-party security providers and which techniques require an on-site security solution to be viable.

住宅计算机网络通常是不安全的，因为它们不能应用公司网络中采用的最佳实践。通常负责管理这些网络的公众可能缺乏财政资源或计算专业知识来部署最先进的网络安全系统。因此，住宅网络通常对欺诈和妥协几乎没有抵抗力。此外，当用户将他们的移动设备从家里带到公司网络时，这些网络可以渗透到公司网络中。支持互联网的嵌入式设备（如家用电器和电源开关）的兴起可能会加剧这些问题，因为入侵可能会影响住宅的物理环境。为了解决这些风险，该项目将探索新的机制，通过位于住宅外的安全执行系统发送网络流量，以仔细筛选对传统计算机和支持互联网的嵌入式设备的攻击。该项目的目标是创造新技术，以提高美国数百万住宅计算机网络的安全性。研究人员将创建一个系统来回答围绕将网络安全决策委托给外部第三方安全提供商的有效性、效率、性能、可扩展性、成本和激励等研究问题。使用一系列云托管的安全中间件，研究人员将在将流量发送到目的地之前，测量网络延迟和对通过这些中间件的隧道住宅网络流量的带宽相关影响。研究人员将评估如何在这些中间件中引入新的安全机制，以及如何在该模型中加强现有的安全协议。该项目将进一步探索如何为支持互联网的嵌入式设备检测和创建自定义安全过滤器，以保护它们试图利用设备上可能存在的漏洞。研究人员将探索可应用于具有相似网络交互模式的嵌入式设备的通用模型，以支持大量设备。最后，研究人员将探索可部署住宅网络安全新领域的潜力。研究人员将检查哪些类型的技术与外部第三方安全提供商兼容，哪些技术需要现场安全解决方案才能可行。

项目成果

期刊论文数量（8）

专著数量（0）

科研奖励数量（0）

会议论文数量（0）

专利数量（0）

Beyond the VPN: Practical Client Identity in an Internet with Widespread IP Address Sharing

超越 VPN：具有广泛 IP 地址共享的互联网中的实用客户端身份

DOI：
发表时间：
2020
期刊：
Conference on Local Computer Networks
影响因子：
0
作者：
Liu, Yu;Shue, Craig A.
通讯作者：
Shue, Craig A.

Exploring Phone-Based Authentication Vulnerabilities in Single Sign-On Systems

探索单点登录系统中基于电话的身份验证漏洞

DOI：
发表时间：
2022
期刊：
International Conference on Information and Communications Security
影响因子：
0
作者：
Tolbert, Matthew M.;Hess, Elie M.;Nascimento, Mattheus C.;Lei, Yunsen;Shue, Craig A.
通讯作者：
Shue, Craig A.

By Your Command: Extracting the User Actions that Create Network Flows in Android

按照您的命令：提取在 Android 中创建网络流的用户操作