Collaborative Research: SURPASS: NSF SFS Unique Scholarship Program in Hardware and Systems Security

合作研究：SURPASS：NSF SFS 硬件和系统安全独特奖学金计划

• 批准号: 1663051
• 负责人: Selcuk Uluagac
• 金额: $ 203.75万
• 依托单位: Florida International University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-01-01 至 2023-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1663051&HistoricalAwards=false
• 关键词: Collaborative; Research; SURPASS; NSF; SFS

There is an urgent need for a well-trained cybersecurity workforce in the government and private sectors. An effective cybersecurity education for our undergraduate and graduate students, using a well-designed curriculum, is essential to meet this need. The emergence of the Internet-of-Things, which promises an unprecedented number of devices, all connected to the Internet, makes the demand for cybersecurity education stronger than ever. This demand calls for not just an enhanced effort, but also a paradigm shift from traditional computer and information security education, which typically assumes that the hardware underlying the information systems is secure and trustworthy. Nonetheless, with a wide array of emerging attacks on hardware, that assumption is rapidly becoming invalid. Hence, there is a critical need to re-design our cybersecurity curriculum such that the nation's STEM student population is ready to take on future cybersecurity challenges. This scholarship program, called SURPASS, is a collaborative effort between two universities, University of Florida (UF) and Florida International University (FIU). Both universities serve diverse student populations, strong internationally-recognized hardware and systems security research programs, and extensive curricular offerings in cybersecurity, with the goal of addressing this need. Specifically, this program provides scholarships to encourage some of the best and brightest students in the state of Florida to pursue careers in hardware and systems security (HSS).The SURPASS SFS program by UF and FIU uniquely involves training students on critical aspects of cybersecurity with a strong emphasis on practical hands-on learning in HSS, utilizing unique lab facilities. SURPASS prepares future cybersecurity practitioners and researchers with a holistic education and training in HSS. Key features of SURPASS are as follows: (1) a focus on hardware security and trust at all levels of hardware abstraction, from chips to printed circuit boards (PCBs) to systems; (2) a careful integration of HSS education into a complete cybersecurity curriculum to enable students to understand system security issues spanning multiple layers, from devices to networks to the cloud; (3) extensive hands-on training, a unique feature, which not only helps students understand the makeup of a complex system, but also stimulates their interest in exploring new attacks/defenses; (4) integration of continuous one-to-one student mentoring from recruitment to placement and a systematic tracking of student progress; and finally, (5) training of a highly-diverse student population leading to the creation of a diverse workforce leveraging the large percentage (81%) of minority students at FIU.

政府和私营部门迫切需要训练有素的网络安全工作人员。为我们的本科生和研究生提供有效的网络安全教育，使用精心设计的课程，对于满足这一需求至关重要。物联网的出现，承诺了前所未有的设备数量，所有连接到互联网，使网络安全教育的需求比以往任何时候都更强烈。这种需求不仅要求加强努力，而且还要求从传统的计算机和信息安全教育中转变模式，传统的计算机和信息安全教育通常假设信息系统底层的硬件是安全和值得信赖的。尽管如此，随着对硬件的一系列新的攻击，这种假设正在迅速变得无效。因此，迫切需要重新设计我们的网络安全课程，以便国家的STEM学生群体准备好应对未来的网络安全挑战。这个奖学金计划，称为SURPASS，是两所大学，佛罗里达大学（UF）和佛罗里达国际大学（FIU）之间的合作努力。这两所大学为不同的学生群体提供服务，强大的国际公认的硬件和系统安全研究项目，以及广泛的网络安全课程，旨在满足这一需求。具体来说，该计划提供奖学金，鼓励一些最好的和最聪明的学生在佛罗里达的状态，追求在硬件和系统安全（HSS）的职业生涯。UF和FIU的SURPASS SFS计划独特地涉及培训学生对网络安全的关键方面，重点是在HSS的实践动手学习，利用独特的实验室设施。SURPASS为未来的网络安全从业者和研究人员提供HSS的整体教育和培训。SURPASS的主要特点如下：（1）专注于硬件抽象的各个层面的硬件安全和信任，从芯片到印刷电路板（PCB）再到系统;（2）将HSS教育精心整合到完整的网络安全课程中，使学生能够理解从设备到网络再到云的多个层面的系统安全问题;（3）广泛的实践培训，这是一个独特的功能，不仅可以帮助学生了解复杂系统的构成，还可以激发他们探索新攻击/防御的兴趣;（4）整合从招聘到安置的持续一对一学生指导以及对学生进步的系统跟踪;最后，（5）培养高度多样化的学生群体，从而利用金融情报大学大部分（81%）少数民族学生创造多样化的劳动力。

项目成果

An evaluation of cryptocurrency payment channel networks and their privacy implications

加密货币支付渠道网络及其隐私影响的评估

• 发表时间: 2021
• 期刊: ITU Journal on Future and Evolving Technologies
• 作者: Erdin, Enes;Mercan, Suat;Akkaya, Kemal
• 通讯作者: Akkaya, Kemal

ReplayMPC: A Fast Failure Recovery Protocol for Secure Multiparty Computation Applications using Blockchain

• DOI: 10.1109/smartcomp58114.2023.00033
• 发表时间: 2023-06
• 期刊: 2023 IEEE International Conference on Smart Computing (SMARTCOMP)
• 作者: Oscar G. Bautista;Kemal Akkaya;Soamar Homsi

Outsourcing Privacy-Preserving Federated Learning on Malicious Networks through MPC

通过 MPC 外包恶意网络上的隐私保护联邦学习

• DOI: 10.1109/lcn58197.2023.10223365
• 发表时间: 2023
• 期刊: 2023 IEEE 48th Conference on Local Computer Networks (LCN
• 作者: Hernandez, Richard;Bautista, Oscar G.;Manshaei, Mohammad Hossein;Sahin, Abdulhadi;Akkaya, Kemal
• 通讯作者: Akkaya, Kemal

A scalable private Bitcoin payment channel network with privacy guarantees

具有隐私保证的可扩展私人比特币支付通道网络

• DOI: 10.1016/j.jnca.2021.103021
• 发表时间: 2021
• 期刊: Journal of Network and Computer Applications
• 影响因子: 8.7
• 作者: Erdin, Enes;Cebe, Mumin;Akkaya, Kemal;Bulut, Eyuphan;Uluagac, Selcuk
• 通讯作者: Uluagac, Selcuk

Forensic Analysis of Cryptojacking in Host-Based Docker Containers Using Honeypots

使用蜜罐对基于主机的 Docker 容器中的加密劫持进行取证分析

• DOI: 10.1109/icc45041.2023.10278764
• 发表时间: 2023
• 期刊: IEEE
• 作者: Franco, Javier;Acar, Abbas;Aris, Ahmet;Uluagac, Selcuk
• 通讯作者: Uluagac, Selcuk