WiFiUS: Collaborative Research: SELIOT: Securing Lifecycle of Internet-of-Things

WiFiUS：协作研究：SELIOT：保护物联网生命周期

• 批准号: 1702911
• 负责人: Gene Tsudik
• 金额: $ 15万
• 依托单位: University of California-Irvine
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-04-01 至 2019-03-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1702911&HistoricalAwards=false
• 关键词: WiFiUS; Collaborative; Research; SELIOT; Securing

This project focuses on developing effective and efficient methods for detection of vulnerable devices in an IoT network, as well as mitigation techniques, as a reaction to identified vulnerabilities. The vision for the scientific impact of this project is a comprehensive set of tools for securing networked IoT devices throughout their lifecycle, coupled with the requirement to co-exist with inherently vulnerable or legacy devices. The project aims to achieve this vision by focusing on three phases of an IoT device's lifecycle:1. Birth: identify vulnerable devices when they are first introduced into an IoT network.2. Life: verify the configuration and operation of devices during their normal operation and updating firmware even in resource-constrained devices. 3. Repurposing: infer changes in device ownership (including disposal) and perform secure deletion of sensitive data whenever ownership change is confirmed.All of the above will be achieved with a strong emphasis on assuring that new security techniques are meaningful and usable by a wide range of users.Research outcomes of this project are expected to benefit society in addressing important IoT security problems before manufacturers saturate the market with ostensibly useful and innovative gadgets that lack sufficient security features, thus being vulnerable to attacks and malware infestations, which can turn them into rogue agents. PhD students involved in the project will benefit from unique opportunities for developing valuable research skills in the important emerging area of IoT security, as well as collaborating with international partners, thus exposing them to new research perspectives. One aspect of anticipated impact is in training the next generation of information security experts who, beyond understanding and appreciating security and privacy concerns in IoT, are also sufficiently skilled to address them. Another aspect of this project's impact will be achieved by transferring our results into prototypes, which can be turned into products and services.

该项目专注于开发有效和高效的方法来检测物联网网络中的易受攻击设备，以及作为对已识别漏洞的反应的缓解技术。该项目的科学影响愿景是一套全面的工具，用于在联网物联网设备的整个生命周期中保护其安全，并要求与固有的易受攻击或传统设备共存。该项目旨在通过关注物联网设备生命周期的三个阶段来实现这一愿景：1.诞生：在首次引入物联网网络时识别易受攻击的设备。生命周期：验证设备在正常运行期间的配置和操作，并更新固件，即使是在资源受限的设备上也是如此。3.重新调整用途：推断设备所有权的变化(包括处置)，并在确认所有权变化时执行安全删除敏感数据。所有以上都将实现，重点是确保新的安全技术有意义并可供广泛用户使用。该项目的研究成果有望在制造商用表面上有用的创新设备淹没市场之前解决重要的物联网安全问题，这些设备缺乏足够的安全功能，从而容易受到攻击和恶意软件感染，这可能会使它们成为流氓代理。参与该项目的博士生将受益于在重要的新兴物联网安全领域发展宝贵的研究技能以及与国际合作伙伴合作的独特机会，从而使他们接触到新的研究视角。预期影响的一个方面是培训下一代信息安全专家，他们除了了解和欣赏物联网中的安全和隐私问题外，还具有足够的技能来解决这些问题。这个项目影响的另一个方面将通过将我们的结果转化为原型来实现，原型可以转化为产品和服务。

项目成果

Reconciling remote attestation and safety-critical operation on simple IoT devices

协调简单物联网设备上的远程认证和安全关键操作

• DOI: 10.1145/3195970.3199853
• 发表时间: 2018
• 期刊: DAC '18 Proceedings of the 55th Annual Design Automation Conference
• 作者: Carpent, Xavier;Eldefrawy, Karim;Rattanavipanon, Norrathep;Sadeghi, Ahmad-Reza;Tsudik, Gene
• 通讯作者: Tsudik, Gene

Advancing remote attestation via computer-aided formal verification of designs and synthesis of executables: opinion

通过计算机辅助形式验证设计和可执行文件的综合来推进远程认证：意见

• DOI: 10.1145/3317549.3323403
• 发表时间: 2019
• 期刊: 12th ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSeC'19
• 作者: Eldefrawy, Karim;Tsudik, Gene
• 通讯作者: Tsudik, Gene

Remote Attestation via Self-Measurement

通过自我测量进行远程认证

• DOI: 10.1145/3279950
• 发表时间: 2019
• 期刊: ACM Transactions on Design Automation of Electronic Systems
• 影响因子: 1.4
• 作者: Carpent, Xavier;Rattanavipanon, Norrathep;Tsudik, Gene
• 通讯作者: Tsudik, Gene

MTRA: Multi-Tier randomized remote attestation in IoT networks

• DOI: 10.1016/j.cose.2018.10.008
• 发表时间: 2019-03
• 期刊: Comput. Secur.
• 作者: Hailun Tan;G. Tsudik;S. Jha

HYDRA: hybrid design for remote attestation (using a formally verified microkernel)

• DOI: 10.1145/3098243.3098261
• 发表时间: 2017-03
• 期刊: Proceedings of the 10th ACM Conference on Security and Privacy in Wireless and Mobile Networks
• 作者: Karim M. El Defrawy;Norrathep Rattanavipanon;G. Tsudik