Planning IUCRC University of Virginia: Center for Hardware and Embedded System Security and Trust (CHEST)

规划 IUCRC 弗吉尼亚大学：硬件和嵌入式系统安全与信任中心 (CHEST)

• 批准号: 1747767
• 负责人: James Lambert
• 金额: $ 1.5万
• 依托单位: University of Virginia Main Campus
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-02-01 至 2019-01-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1747767&HistoricalAwards=false
• 关键词: Planning; IUCRC; University; Virginia; Center

Integrated circuit and embedded hardware devices are critical to most modern military and industrial systems for defense, energy, healthcare, banking, communication, transportation, and other sectors. These devices are more vulnerable than ever to malicious tampering by untrusted entities, with threats over a broad range of attack vectors. Malicious functionality can be added to the devices during the design process, fabrication, or assembly, leading to compromised systems, often without detection. This collaborative effort seeks to further the national defense by developing novel methodologies and technologies that enhance trust and security of these devices and their respective systems.The research goal is to understand the risk and resilience of systems with embedded devices through innovations to methodologies of data analytics and systems engineering. Initial research topics include: Resource allocation to the security of critical devices in large-scale systems, tracking emergent and future conditions of the device supply chain, and system resilience to attacks on networks of interconnected devices. The research identifies factors that influence risk and resilience in the lifecycles and supply chains of the devices, develops the associated performance metrics and models, and identifies the key scenarios and extreme events.The to-be-planned Center is expected to influence the design and operation of industrial and military systems, focusing on the security vulnerabilities associated with embedded devices. The ability of systems with embedded devices to absorb disruptive shocks and recover with minimal loss of service is critical to missions, resources, personnel safety, etc. The dissemination of these results improves the resilience of these systems to a variety of emergent and future conditions including technologies, environments, operator behaviors, evolutions of requirements, resource availability, suppliers, etc., and develops recommendations for industry, military, and government stakeholders.The collaborative group for the Industry-University Cooperative Research Center for Hardware and Embedded System Security and Trust is composed of George Mason University, Northeastern University, University of Connecticut, University of Texas at Dallas, University of Virginia, and Wright State University. The collaborators host a website at https://www.vdl.afrl.af.mil/programs/PG_CHEST_IUCRC with meeting materials, program information, publications, etc. The website is made available indefinitely or until the Center transitions to the next phase.

集成电路和嵌入式硬件设备对于国防、能源、医疗保健、银行、通信、交通和其他部门的大多数现代军事和工业系统至关重要。这些设备比以往任何时候都更容易受到不可信实体的恶意篡改，威胁来自广泛的攻击媒介。恶意功能可能会在设计过程、制造或组装过程中添加到设备中，从而导致系统受损，通常不会被检测到。这一合作努力寻求通过开发新的方法和技术来增强这些设备及其各自系统的信任和安全性，以进一步加强国防。研究目标是通过对数据分析和系统工程方法的创新，了解具有嵌入式设备的系统的风险和弹性。最初的研究课题包括：大规模系统中关键设备安全的资源分配，跟踪设备供应链的紧急和未来状况，以及系统对互联设备网络攻击的恢复能力。该研究确定了在设备的生命周期和供应链中影响风险和弹性的因素，开发了相关的性能指标和模型，并确定了关键场景和极端事件。预计计划中的中心将影响工业和军事系统的设计和运营，重点关注与嵌入式设备相关的安全漏洞。具有嵌入式设备的系统吸收破坏性冲击并以最小的服务损失恢复的能力对任务、资源、人员安全等至关重要。这些结果的传播提高了这些系统对各种紧急和未来条件的弹性，包括技术、环境、操作员行为、需求的演变、资源可用性、供应商等，并为行业、军事和政府利益攸关方提供建议。工业-大学硬件和嵌入式系统安全与信任行业-大学合作研究中心的合作小组由乔治梅森大学、东北大学、康涅狄格大学、德克萨斯大学达拉斯分校、弗吉尼亚大学和莱特州立大学组成。协作者在https://www.vdl.afrl.af.mil/programs/PG_CHEST_IUCRC上建立了一个网站，提供会议材料、计划信息、出版物等。该网站将无限期提供，或在中心过渡到下一阶段之前提供。