SaTC: EDU: Collaborative: Building a Low-cost and State-of-the-art IoT Security Hands-on Laboratory

SaTC：EDU：协作：建立低成本且最先进的物联网安全实践实验室

• 批准号: 1915780
• 负责人: Changchun Zou
• 金额: $ 34.02万
• 依托单位: The University of Central Florida Board of Trustees
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-10-01 至 2023-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1915780&HistoricalAwards=false
• 关键词: SaTC; EDU; Collaborative; Building; Low

The Internet of Things (IoT) interconnects everything including physical and virtual objects together through communication protocols. IoT has broad applications in digital healthcare, smart cities, transportation, agriculture, logistics and many other domains. The popularity of IoT has raised security and privacy concerns. This project seeks to improve IoT and privacy education through the development of laboratory module materials. This will include the development of an IoT platform with an industrial grade microcontroller (MCU) equipped with a crypto co-processor that is significantly lower-cost than existing platforms. This platform will allow for the development of a full-fledged IoT laboratory with hardware security modules at a cost that will make it affordable for students and institutions. The proposed IoT platform, teaching labs with both hardware and software, case studies and faculty development summer workshop will help improve curricula, student learning, and faculty collaboration and development at the participating institutes and partner intuitions, including Hispanic Serving Institutions and Historically Black Colleges and Universities (HBCUs). This project is the first to use an industrial grade microcontroller and a crypto coprocessor to systematically develop teaching materials including hands-on labs and case studies on IoT security and privacy. The intellectual merit of the proposed project lies in its development of effective, engaging and novel teaching materials on IoT security. The deliverables include: a low-cost IoT development kit; the integrated development environment (IDE) to use the kit; multiple teaching labs covering the hardware security, secure key storage, secure boot, data security, network security, secure firmware upgrade and crypto co-processor; two case studies on building trustworthy air quality monitoring systems. The investigators will build awareness and competence to respond to a dynamic and rapidly developing array of cyber threats, especially those in the emerging IoT applications.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

物联网（IoT）通过通信协议将包括物理和虚拟对象在内的所有事物互连在一起。物联网在数字医疗、智慧城市、交通、农业、物流等许多领域都有广泛的应用。物联网的普及引发了人们对安全和隐私的担忧。该项目旨在通过开发实验室模块材料来改善物联网和隐私教育。这将包括开发一个带有工业级微控制器（MCU）的物联网平台，该微控制器配备了一个加密协处理器，其成本明显低于现有平台。该平台将允许开发一个具有硬件安全模块的成熟物联网实验室，其成本将使学生和机构负担得起。拟议的物联网平台，教学实验室与硬件和软件，案例研究和教师发展夏季研讨会将有助于改善课程，学生学习，教师合作和发展在参与机构和合作伙伴的直觉，包括西班牙裔服务机构和历史上的黑人学院和大学（HBCU）。该项目是第一个使用工业级微控制器和加密协处理器系统地开发教学材料的项目，包括关于物联网安全和隐私的动手实验室和案例研究。拟议项目的智力价值在于开发有效，引人入胜和新颖的物联网安全教学材料。可交付成果包括：一个低成本的物联网开发工具包;使用该工具包的集成开发环境（IDE）;多个教学实验室，涵盖硬件安全、安全密钥存储、安全靴子、数据安全、网络安全、安全固件升级和加密协处理器;两个关于构建值得信赖的空气质量监测系统的案例研究。该奖项反映了NSF的法定使命，通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Multilayered Defense-in-Depth Architecture for Cryptocurrency Wallet

加密货币钱包的多层纵深防御架构

• DOI: 10.1109/iccc51575.2020.9345013
• 发表时间: 2020
• 期刊: 2020 IEEE 6th International Conference on Computer and Communications (ICCC
• 作者: Rezaeighaleh, Hossein;Zou, Cliff C.
• 通讯作者: Zou, Cliff C.

Random Segmentation: New Traffic Obfuscation against Packet-Size-Based Side-Channel Attacks

随机分段：针对基于数据包大小的侧通道攻击的新流量混淆

• DOI: 10.3390/electronics12183816
• 发表时间: 2023
• 期刊: Electronics
• 影响因子: 2.9
• 作者: Alyami, Mnassar;Alghamdi, Abdulmajeed;Alkhowaiter, Mohammed A.;Zou, Cliff;Solihin, Yan
• 通讯作者: Solihin, Yan

On Sensor Security in the Era of IoT and CPS

• DOI: 10.1007/s42979-020-00423-5
• 发表时间: 2021-01
• 期刊: SN Computer Science
• 作者: Max Panoff;R. Dutta;Yaodan Hu;Kaichen Yang;Yier Jin

Do Not Give a Dog Bread Every Time He Wags His Tail: Stealing Passwords through Content Queries (CONQUER) Attacks

• DOI: 10.14722/ndss.2023.24005
• 发表时间: 2023
• 期刊: Proceedings 2023 Network and Distributed System Security Symposium
• 作者: Chongqing Lei;Zhen Ling;Yue Zhang;K. Dong;Kaizheng Liu;Junzhou Luo;Xinwen Fu

User Profiling Attack Using Windows Registry Data

使用 Windows 注册表数据进行用户分析攻击

• DOI: 10.1109/uemcon59035.2023.10315968
• 发表时间: 2023
• 期刊: Electronics & Mobile Communication Conference (UEMCON
• 作者: Amoruso, Edward L.;Zou, Cliff C.;Leinecker, Richard
• 通讯作者: Leinecker, Richard