Planning IUCRC Indiana University: Center for High-Assurance Secure Systems and IoT (CHASSI)

规划 IUCCRC 印第安纳大学：高保证安全系统和物联网中心 (CHASSI)

• 批准号: 1916635
• 负责人: Linda Camp
• 金额: $ 1.4万
• 依托单位: Indiana University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-08-01 至 2021-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1916635&HistoricalAwards=false
• 关键词: Planning; IUCRC; Indiana; University; Center

The IUCRC planning project will establish the feasibility of a multi-site Center for High-Assurance Secure Systems and Internet-of-Things (CHASSI) that will focus on areas where both security and high assurance are necessary to support operations of high mission criticality, due to safety or economic impact. Examples include medical devices, manufacturing, the energy grid, real-time financial markets, construction, and defense. Combining security and high-assurance is a difficult question, and by intentionally combining them and the collective expertise of Center members will lead to new models, techniques, designs, architectures, and systems that will be applicable across of range of important U.S. industries. CHASSI has five sites: Indiana University, University of Kansas, University of Minnesota, Syracuse University, and Case Western Reserve University. CHASSI research falls into four main thrusts: (1) Architectures, design and formal modeling for systems-level security, privacy, stability, and performance; (2) Secure communication, sensing, and devices; (3) Scalable trust; and (4) Human behavior in privacy and security. IU strengths include the internet of things in home environments (IoT), machine learning in security, applied system security, and interdisciplinary studies. Complementary expertise at the other sites includes cyber-physical systems and systems security, formal modeling, assurance of medical devices, industrial IoT, and human factors. The broader impacts are 1) the interaction between industry and researchers; 2) mentoring of students; 3) inclusive outreach; and 4) inclusion of rarely studied populations. Industry will obtain access to cutting edge research, while researchers will improve diffusion and adoption of innovations. The collaboration between the university and industry also enhance education, offering students real-world data and experiences. Researchers at IU have a tradition of working with under-represented populations in research: older adults, vulnerable populations, and diverse communities. Outreach will include under-represented populations such as retirees, mentoring will include under-represented groups, and educational activities will be created for k-12 educators.The collaborators from this multi-university-industry Center will host a single Center-wide repository at: https://chassi.ku.edu. This shared repository will include meeting materials, program information, publications, etc., and will be made available for a minimum of 5 years after conclusion of the award or until the Center transitions to the next phase.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

IUCRC规划项目将建立一个多站点高保证安全系统和物联网中心（CHASSI）的可行性，该中心将专注于安全和高保证都是必要的领域，以支持由于安全或经济影响而具有高使命关键性的操作。 例子包括医疗设备、制造业、能源网、实时金融市场、建筑和国防。 结合安全性和高保证是一个困难的问题，通过有意地将它们与中心成员的集体专业知识相结合，将产生适用于美国重要行业的新模型，技术，设计，架构和系统。CHASSI有五个站点：印第安纳州大学、堪萨斯大学、明尼苏达大学、锡拉丘兹大学和凯斯西储大学。 CHASSI的研究福尔斯分为四个主要方面：（1）系统级安全性、隐私、稳定性和性能的架构、设计和正式建模;（2）安全通信、传感和设备;（3）可扩展的信任;（4）隐私和安全方面的人类行为。 IU的优势包括家庭环境中的物联网（IoT），安全机器学习，应用系统安全和跨学科研究。其他站点的补充专业知识包括网络物理系统和系统安全、正式建模、医疗设备保证、工业物联网和人为因素。更广泛的影响是：1）行业和研究人员之间的互动; 2）对学生的指导; 3）包容性的推广; 4）包括很少研究的人群。 工业将获得尖端研究，而研究人员将改善创新的传播和采用。大学和行业之间的合作也加强了教育，为学生提供真实世界的数据和经验。IU的研究人员有一个传统，即在研究中与代表性不足的人群合作：老年人，弱势群体和多样化的社区。外展将包括代表性不足的人群，如退休人员，指导将包括代表性不足的群体，并将为k-12教育工作者创建教育活动。来自这个多大学-行业中心的合作者将在https://chassi.ku.edu上托管一个单一的中心范围的存储库。该共享存储库将包括会议材料、项目信息、出版物等，该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Making Access Control Easy in IoT

让物联网访问控制变得简单

• DOI: 10.1007/978-3-030-81111-2_11
• 发表时间: 2021
• 期刊: IFIP advances in information and communication technology
• 作者: Andalibi, Vafa;Dev, Jayati;Kim, DongInn;Lear, Eliot;Camp, Jean
• 通讯作者: Camp, Jean

Throwing MUD into the FOG: Defending IoT and Fog by expanding MUD to Fog network

将 MUD 投入 FOG：通过将 MUD 扩展到雾网络来捍卫物联网和雾

• 发表时间: 2021
• 期刊: HotEdge: A Usenix ATC Workshop
• 作者: Andalibi, Vafa;Kim, DongInn;Camp, Jean
• 通讯作者: Camp, Jean

On the Analysis of MUD-Files’ Interactions, Conflicts, and Configuration Requirements Before Deployment

部署前 MUD 文件的交互、冲突和配置要求分析

• 发表时间: 2021
• 期刊: SaSeIoT
• 作者: Andalibi, Vafa;Lear, Eliot;Dev, Jayati;Kim, DongInn;Camp, Jean
• 通讯作者: Camp, Jean

Fingerprinting Edge and Cloud Services in IoT

• DOI: 10.1109/sadfe51007.2020.00011
• 发表时间: 2020-05
• 期刊: 2020 13th International Conference on Systematic Approaches to Digital Forensic Engineering (SADFE)
• 作者: DongInn Kim;Vafa Andalibi;L. J. Camp