WiFIUS: Collaborative Research: SELIOT: Securing Lifecycle of Internet-of-Things

WiFIUS：协作研究：SELIOT：保护物联网生命周期

• 批准号: 1702879
• 负责人: Patrick Traynor
• 金额: $ 15万
• 依托单位: University of Florida
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-04-01 至 2020-11-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1702879&HistoricalAwards=false
• 关键词: WiFIUS; Collaborative; Research; SELIOT; Securing

This project focuses on developing effective and efficient methods for detection of vulnerable devices in an IoT network, as well as mitigation techniques, as a reaction to identified vulnerabilities. The vision for the scientific impact of this project is a comprehensive set of tools for securing networked IoT devices throughout their lifecycle, coupled with the requirement to co-exist with inherently vulnerable or legacy devices. The project aims to achieve this vision by focusing on three phases of an IoT device's lifecycle:1. Birth: identify vulnerable devices when they are first introduced into an IoT network.2. Life: verify the configuration and operation of devices during their normal operation and updating firmware even in resource-constrained devices. 3. Repurposing: infer changes in device ownership (including disposal) and perform secure deletion of sensitive data whenever ownership change is confirmed.All of the above will be achieved with a strong emphasis on assuring that new security techniques are meaningful and usable by a wide range of users.Research outcomes of this project are expected to benefit society in addressing important IoT security problems before manufacturers saturate the market with ostensibly useful and innovative gadgets that lack sufficient security features, thus being vulnerable to attacks and malware infestations, which can turn them into rogue agents. PhD students involved in the project will benefit from unique opportunities for developing valuable research skills in the important emerging area of IoT security, as well as collaborating with international partners, thus exposing them to new research perspectives. One aspect of anticipated impact is in training the next generation of information security experts who, beyond understanding and appreciating security and privacy concerns in IoT, are also sufficiently skilled to address them. Another aspect of this project's impact will be achieved by transferring our results into prototypes, which can be turned into products and services.

该项目的重点是开发有效和高效的方法来检测物联网网络中的脆弱设备，以及缓解技术，作为对已识别漏洞的反应。该项目对科学影响的愿景是提供一套全面的工具，用于在整个生命周期内保护联网物联网设备，并要求与固有的脆弱或遗留设备共存。该项目旨在通过关注物联网设备生命周期的三个阶段来实现这一愿景：1.诞生：在设备首次引入物联网网络时识别易受攻击的设备。2.寿命：在设备正常运行期间验证设备的配置和操作，即使在资源受限的设备中也可以更新固件。3.改变用途：推断设备所有权变更（包括处置）并在确认所有权变更时执行敏感数据的安全删除。所有上述目标都将在确保新的安全技术对广泛的用户有意义和可用性的情况下实现。该项目的研究成果预计将有利于社会在制造商使市场饱和之前解决重要的物联网安全问题和创新的小工具，缺乏足够的安全功能，因此很容易受到攻击和恶意软件的侵扰，这可能会把他们变成流氓代理。参与该项目的博士生将受益于独特的机会，在物联网安全的重要新兴领域发展有价值的研究技能，以及与国际合作伙伴合作，从而使他们接触到新的研究视角。预期影响的一个方面是培训下一代信息安全专家，他们除了理解和理解物联网中的安全和隐私问题外，还具有足够的技能来解决这些问题。该项目影响的另一个方面将通过将我们的成果转化为原型来实现，这些原型可以转化为产品和服务。

项目成果

Hello, Is It Me You're Looking For?: Differentiating Between Human and Electronic Speakers for Voice Interface Security

• DOI: 10.1145/3212480.3212505
• 发表时间: 2018-06
• 期刊: Proceedings of the 11th ACM Conference on Security & Privacy in Wireless and Mobile Networks
• 作者: Logan Blue;Luis Vargas;Patrick Traynor