NeTS: Small: RUI: Towards Secure Home Networks

过去十年见证了住宅宽带连接、家庭网络、智能家居设备和物联网（IoT）系统的快速增长。然而，保护家庭网络带来了严峻的挑战，因为许多家庭用户几乎没有管理、保护和排除网络和连接设备故障的技术专业知识。保护和管理家庭网络的令人信服的解决方案需要一个自动化的基于网络的解决方案，该解决方案可以总结家庭网络中发生的情况，解释为什么某些观察到的行为与正常或可疑活动相关联，并建议如何防御安全威胁并通过简单可行的步骤阻止意外行为。为了加深对家庭网络安全研究问题和挑战的理解，本项目在可编程家庭路由器上开发了一个内置的面向行为的流量分析系统，以收集、分析和理解家庭网络中所有可上网设备的传入、传出和内部流量。本研究项目将解决以下研究问题：i）如何在对应用性能影响很小的情况下自动地从家庭网络收集业务数据; ii）如何经由传入、传出和内部业务来捕获和理解家庭设备的行为模式; iii）如何发现跨分布式家庭网络的网络范围的活动;以及如何利用家庭设备的行为模式来提高安全性和管理性。揭示家庭设备行为模式的挑战包括家庭设备的异构性、不同家庭网络中的业务行为的广泛多样性以及对用户隐私的高期望。该项目将启动一个家庭网络教育计划，让学生参与解决现实世界的问题。 该项目为亚利桑那州立大学西校区代表性不足的群体的学生带来了研究和发展的机会，这是一个以本科为主的机构，其中37%的应用计算专业是代表性不足的少数民族。该奖项反映了NSF的法定使命，并被认为值得通过使用基金会的智力价值和更广泛的影响审查标准进行评估来支持。

The last decade has witnessed the rapid growth of residential broadband connections, home networks, smart home devices, and Internet-of-Things (IoT) systems. However, securing home networks poses a serious challenge, because many home users have little technical expertise to manage, secure and troubleshoot their networks and connected devices. A compelling solution to secure and manage home networks requires an automated and network-based solution that summarizes what is going on in home networks, explains why some observed behaviors are associated with normal or suspicious activities, and suggests how to defend against security threats and stop unexpected behaviors with simple and actionable steps. To improve understanding of the research problems and challenges in securing home networks, this project develops a built-in behavior-oriented traffic profiling system on programmable home routers to collect, analyze and make sense of incoming, outgoing and internal traffic of all Internet-capable devices in home networks.This research project will address the following research problems: i) how to automatically collect traffic data from home networks with little impact on application performance; ii) how to capture and make sense of behavior patterns of home devices via incoming, outgoing, and internal traffic; iii) how to discover network-wide activities across distributed home networks; and iv) how to leverage behavior patterns of home devices to improve security and management.The challenges in uncovering behavior patterns of home devices includes the heterogeneity of home devices, the wide diversity of traffic behavior in different home networks, and the high expectation of user privacy. This project will initiate an educational program on home networks that will engage students in solving the real-world problems. The project brings research and development opportunities for students in underrepresented groups at ASU west campus, a predominantly undergraduate institution where 37% of the applied computing majors are underrepresented minorities.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.