MRI: Development of An Instrument for Secure Cyber Physical Systems Analytics

MRI：开发安全网络物理系统分析仪器

• 批准号: 1828467
• 负责人: Murat Kantarcioglu
• 金额: $ 60.18万
• 依托单位: University of Texas at Dallas
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-09-01 至 2023-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1828467&HistoricalAwards=false
• 关键词: MRI; Development; Instrument; Secure; Cyber

This project aims to develop a secure and scalable instrument that can efficiently perform big data analytics on data collected from Internet of Things (IoT) devices while providing tools for preserving data security and privacy. IoT devices are monitoring and controlling systems that interact with the physical world by collecting, processing and transmitting data using the internet. IoT devices include home automation systems, smart grid, transportation systems, medical devices, building controls, manufacturing and industrial control systems. With the increase in deployment of IoT devices, the amount of data generated by these devices also increases. There is thus a need for large-scale, and secure data processing systems to process and extract information for efficient and impactful decision-making. The issue of trustworthiness in computation and data security arises when the IoT data contains sensitive information. For example, data collected using the home health devices such as a wireless blood-pressure monitor may need to be analyzed and correlated with other information. In these cases, data owners may need to protect their data and demand guaranties about data security and integrity. Development of this instrument will enable new research projects that require efficient and secure processing of IoT data. Consequently, this may allow the creation of novel IoT data processing tools and services which are not feasible today due to security and privacy concerns. The proposed instrument will integrate two important components in a novel and unique way. First, an IoT data gathering component that can collect various data from IoT devices including the industrial IoT (IIoT) devices, will be developed. This component will create the necessary data gathering part of the instrument. It will allow researchers to adjust data collection frequency and granularity to enable different types of data collection activities for various research projects. The second component of the instrument will be the secure data analytics layer that can process the potentially sensitive IoT data including the network packets, sensor data, etc. As part of this component, recently developed secure data processing techniques which leverage trusted execution environments (TEEs) will be implemented. In addition, these TEE-based techniques will be tailored for different types of IoT data to increase their efficiency and limit any sensitive data leakage. During this project, these components will be integrated using custom developed software which will be open sourced at the final stage. Furthermore, these components will be integrated to test various research tools with respect to scalability, security and data privacy. The developed instrument will be made available to our collaborators and larger scientific community.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该项目旨在开发一种安全且可扩展的工具，可以有效地对从物联网（IoT）设备收集的数据进行大数据分析，同时提供保护数据安全和隐私的工具。物联网设备是通过使用互联网收集、处理和传输数据来与物理世界进行交互的监控系统。物联网设备包括家庭自动化系统、智能电网、交通系统、医疗设备、楼宇控制、制造和工业控制系统。随着物联网设备部署的增加，这些设备生成的数据量也在增加。 因此，需要大规模且安全的数据处理系统来处理和提取信息，以进行有效且有影响力的决策。当物联网数据包含敏感信息时，计算和数据安全的可信度问题就会出现。例如，使用诸如无线血压监测器的家庭健康设备收集的数据可能需要被分析并与其他信息相关联。在这些情况下，数据所有者可能需要保护他们的数据，并要求确保数据的安全性和完整性。该仪器的开发将使新的研究项目能够有效和安全地处理物联网数据。因此，这可能允许创建新的物联网数据处理工具和服务，由于安全和隐私问题，这些工具和服务在今天是不可行的。拟议的文书将以一种新颖独特的方式将两个重要组成部分结合起来。首先，将开发物联网数据收集组件，可以从包括工业物联网（IIoT）设备在内的物联网设备收集各种数据。该组件将创建仪器的必要数据收集部分。它将允许研究人员调整数据收集频率和粒度，以便为各种研究项目进行不同类型的数据收集活动。该仪器的第二个组件将是安全数据分析层，可以处理潜在敏感的物联网数据，包括网络数据包，传感器数据等。作为该组件的一部分，将实施最近开发的利用可信执行环境（TEE）的安全数据处理技术。此外，这些基于TEE的技术将针对不同类型的物联网数据量身定制，以提高其效率并限制任何敏感数据泄漏。在该项目期间，这些组件将使用定制开发的软件进行集成，该软件将在最后阶段开放源代码。此外，这些组件将被集成，以测试各种研究工具的可扩展性，安全性和数据隐私。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

GINN: Fast GPU-TEE Based Integrity for Neural Network Training

• DOI: 10.1145/3508398.3511503
• 发表时间: 2022-04
• 期刊: Proceedings of the Twelfth ACM Conference on Data and Application Security and Privacy
• 作者: Aref Asvadishirehjini;Murat Kantarcioglu;B. Malin

Secure IoT Data Analytics in Cloud via Intel SGX

通过 Intel SGX 在云中保护物联网数据分析

• DOI: 10.1109/cloud49709.2020.00020
• 发表时间: 2020
• 期刊: 2020 IEEE 13th International Conference on Cloud Computing (CLOUD
• 作者: Islam, Md Shihabul;Ozdayi, Mustafa Safa;Khan, Latifur;Kantarcioglu, Murat
• 通讯作者: Kantarcioglu, Murat

IoTFlowGenerator: Crafting Synthetic IoT Device Traffic Flows for Cyber Deception

IoTFlowGenerator：为网络欺骗制作合成物联网设备流量

• DOI: 10.32473/flairs.36.133376
• 发表时间: 2023
• 期刊: The International FLAIRS Conference Proceedings
• 作者: Bao, Joseph;Kantarcioglu, Murat;Vorobeychik, Yevgeniy;Kamhoua, Charles
• 通讯作者: Kamhoua, Charles

Secure Real-Time Heterogeneous IoT Data Management System

• DOI: 10.1109/tps-isa48467.2019.00037
• 发表时间: 2019-12
• 期刊: 2019 First IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA)
• 作者: Md Shihabul Islam;H. Verma;L. Khan;Murat Kantarcioglu