SHF: Small: System-Level Design of Attack-Resistant Safety-Critical Systems

该项目采用设计自动化方法来保护安全/安全关键网络物理（CPS）和物联网（IoT）系统免受来自互联网或其他不当使用的攻击。CPS和物联网系统将复杂的计算机网络连接到物理世界的对象和机器。与传统的信息技术（IT）系统相比，这种组合对信息安全和物理安全提出了新的担忧。该项目将为安全关键系统的设计开发方法、算法和工具，包括多处理器片上系统（mpsoc）和网络控制系统。威胁可能来自信息安全漏洞，也可能来自与安全相关的故障。这个项目开发的方法和工具将使系统设计人员能够加强他们的设计，以抵御已知的攻击。这些方法也可以在系统部署后用于重新设计系统组件，以减少系统组件对突发威胁的脆弱性。该项目还将有助于在信息安全这一重要领域开发新课程和培训美国劳动力，并将在这一努力中包括妇女、少数民族和代表性不足的群体。该项目为安全关键型网络物理和物联网（IoT）系统的攻击感知设计开发了一种新方法。一个正式的、多层的模型被用来描述系统。新的设计时重新合成方法分析系统的潜在攻击，并修改系统以减轻攻击。该方法考虑了功能攻击和面向时间的服务质量攻击。可以在多个级别上应用缓解措施：中间件、操作系统和硬件。攻击缓解是一个优化问题。根据成本和为每个有效计算应用的缓解数量选择一组缓解。该方法适用于多个尺度的网络系统，包括智能手机中使用的多处理器片上系统和网络控制系统。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

This project takes a design automation approach to the protection of safety/security-critical cyber-physical (CPS) and Internet-of-Things (IoT) systems against attacks originating from the Internet or from other inappropriate use. CPS and IoT systems connect sophisticated computer networks to physical world objects and machines. This combination poses new concerns over information security and physical safety than are posed by traditional information technology (IT) systems. This project will develop methodologies, algorithms, and tools for the design of safety-critical systems, including both multiprocessor systems-on-chips (MPSoCs) and networked control systems. Threats may come from information security vulnerabilities as well as safety-related faults. The methodologies and tools developed by this project will enable system designers to harden their designs against known attacks. These methods can also be used after system deployment to redesign system components to reduce their vulnerability to emergent threats. The project would also help develop new curriculum and train US workforce in the important area of information security and would be inclusive of the women, minority, and underrepresented groups in this endeavor.This project develops a new methodology for attack-aware design for safety-critical cyber-physical and Internet-of-Things (IoT) systems. A formal, multilayer model is used to describe the system. New design-time re-synthesis methods analyze the system for potential attacks and modify the system to mitigate the attacks. The methodology considers both functional attacks and timing-oriented quality-of-service attacks. Mitigations may be applied at multiple levels: middleware, operating system, and hardware. Attack mitigation is posed as an optimization problem. A set of mitigations is selected based on cost and on the number of mitigations applied for each valid computation. The methodology is applicable to networked systems at multiple scales, including both multiprocessor systems-on-chips used in smartphones and networked control systems.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.