WiFIUS: Collaborative Research: SELIOT: Securing Lifecycle of Internet-of-Things

该项目侧重于开发有效和高效的方法来检测物联网网络中的易受攻击设备，以及缓解技术，作为对已发现的漏洞的反应。该项目的科学影响愿景是一套全面的工具，用于保护联网物联网设备的整个生命周期，同时要求与固有的易受攻击或遗留设备共存。该项目旨在通过关注物联网设备生命周期的三个阶段来实现这一愿景：出生：在易受攻击的设备首次引入物联网网络时识别它们。寿命：在设备正常运行和更新固件期间，即使在资源受限的设备中，也会对设备的配置和操作进行验证。3. 再利用：推断设备所有权的变化（包括处置），并在确认所有权变化时执行敏感数据的安全删除。要实现上述所有目标，必须强调确保新的安全技术是有意义的，并且可供广泛的用户使用。该项目的研究成果有望在制造商将表面上有用和创新的设备饱和市场之前，在解决重要的物联网安全问题方面造福社会，这些设备缺乏足够的安全功能，因此容易受到攻击和恶意软件的侵扰，这可能会使它们变成流氓代理。参与该项目的博士生将受益于独特的机会，在物联网安全的重要新兴领域发展有价值的研究技能，并与国际合作伙伴合作，从而使他们接触到新的研究视角。预期影响的一个方面是培训下一代信息安全专家，他们除了理解和欣赏物联网中的安全和隐私问题外，还具有足够的技能来解决这些问题。这个项目影响的另一个方面将通过将我们的结果转化为原型来实现，这些原型可以转化为产品和服务。

This project focuses on developing effective and efficient methods for detection of vulnerable devices in an IoT network, as well as mitigation techniques, as a reaction to identified vulnerabilities. The vision for the scientific impact of this project is a comprehensive set of tools for securing networked IoT devices throughout their lifecycle, coupled with the requirement to co-exist with inherently vulnerable or legacy devices. The project aims to achieve this vision by focusing on three phases of an IoT device's lifecycle:1. Birth: identify vulnerable devices when they are first introduced into an IoT network.2. Life: verify the configuration and operation of devices during their normal operation and updating firmware even in resource-constrained devices. 3. Repurposing: infer changes in device ownership (including disposal) and perform secure deletion of sensitive data whenever ownership change is confirmed.All of the above will be achieved with a strong emphasis on assuring that new security techniques are meaningful and usable by a wide range of users.Research outcomes of this project are expected to benefit society in addressing important IoT security problems before manufacturers saturate the market with ostensibly useful and innovative gadgets that lack sufficient security features, thus being vulnerable to attacks and malware infestations, which can turn them into rogue agents. PhD students involved in the project will benefit from unique opportunities for developing valuable research skills in the important emerging area of IoT security, as well as collaborating with international partners, thus exposing them to new research perspectives. One aspect of anticipated impact is in training the next generation of information security experts who, beyond understanding and appreciating security and privacy concerns in IoT, are also sufficiently skilled to address them. Another aspect of this project's impact will be achieved by transferring our results into prototypes, which can be turned into products and services.