SaTC: CORE: Small: Collaborative: Hardware-assisted Plausibly Deniable System for Mobile Devices

SaTC：核心：小型：协作：用于移动设备的硬件辅助合理可否认系统

• 批准号: 1928331
• 负责人: Weisong Shi
• 金额: $ 25万
• 依托单位: Wayne State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-10-01 至 2023-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1928331&HistoricalAwards=false
• 关键词: SaTC; CORE; Small; Collaborative; Hardware

Mobile computing devices typically use encryption to protect sensitive information. However, traditional encryption systems used in mobile devices cannot defend against an active attacker who can force the mobile device owner to disclose the key used for decrypting the sensitive information. This is particularly of concern to dissident users who are targets of nation states. An example of this would be a human rights worker collecting evidence of untoward activities in a region of oppression or conflict and storing the same in an encrypted form on the mobile device, and then being coerced to disclose the decryption key by an official. Plausibly Deniable Encryption (PDE) has been proposed to defend against such adversaries who can coerce users into revealing the encrypted sensitive content. However, existing techniques suffer from several problems when used in flash-memory-based mobile devices, such as weak deniability because of the way read/write/erase operations are handled at the operating systems level and at the flash translation layer, various types of side channel attacks, and computation and power limitations of mobile devices. This project investigates a unique opportunity to develop an efficient (low-overhead) and effective (high-deniability) hardware-assisted PDE scheme on mainstream mobile devices that is robust against a multi snapshot adversary. The project includes significant curriculum development activities and outreach activities to K-12 students. This project fundamentally advances the mobile PDE systems by leveraging existing hardware features such as flash translation layer (FTL) firmware and TrustZone to achieve a high deniability with a low overhead. Specifically, this project develops a PDE system with capabilities to: 1) defend against snapshot attacks using raw flash memory on mobile devices; and 2) eliminate side-channel attacks that compromise deniability; 3) be scalable to deploy on mainstream mobile devices; and 4) efficiently provide usable functions like fast mode switching. This project also develops novel teaching material on PDE and cybersecurity for K-12 students and the Regional Cybersecurity Education Collaboration (RCEC), a new educational partnership on cybersecurity in Michigan.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

移动计算设备通常使用加密来保护敏感信息。然而，移动设备中使用的传统加密系统无法抵御主动攻击者的攻击，后者可以迫使移动设备所有者披露用于解密敏感信息的密钥。这对作为民族国家目标的持不同政见的用户来说尤其令人担忧。这方面的一个例子是，人权工作者收集受压迫或冲突地区不良活动的证据，以加密形式存储在移动设备上，然后被一名官员强迫披露解密密钥。看似可信的可否认加密(PDE)已经被提出来防御这样的攻击者，这些攻击者可以强迫用户泄露加密的敏感内容。然而，当在基于闪存的移动设备中使用时，现有技术受到几个问题的困扰，例如由于在操作系统级别和在闪存转换层处理读/写/擦除操作的方式而导致的弱可否认性、各种类型的侧通道攻击、以及移动设备的计算和功率限制。该项目研究了在主流移动设备上开发高效(低开销)和有效(高可否认性)的硬件辅助PDE方案的独特机会，该方案对多快照对手具有健壮性。该项目包括重要的课程开发活动和面向K-12学生的外联活动。该项目通过利用闪存转换层(FTL)固件和TrustZone等现有硬件功能，以低开销实现高可否认性，从而从根本上促进了移动PDE系统的发展。具体地说，该项目开发了一个PDE系统，该系统具有以下功能：1)使用移动设备上的原始闪存防御快照攻击；2)消除危及可否认性的旁路攻击；3)可扩展以部署在主流移动设备上；4)高效地提供可用功能，如快速模式切换。该项目还为K-12学生和地区网络安全教育协作(RCEC)开发了关于PDE和网络安全的新教材。区域网络安全教育协作(RCEC)是密歇根州关于网络安全的新教育伙伴关系。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，认为值得支持。

项目成果

MobiWear: A Plausibly Deniable Encryption System for Wearable Mobile Devices

• DOI: 10.1007/978-3-030-80851-8_10
• 发表时间: 2021-05
• 期刊: Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering
• 作者: Niusen Chen;Bo Chen;Weisong Shi

TrustZone Enhanced Plausibly Deniable Encryption System for Mobile Devices

• DOI: 10.1145/3453142.3493512
• 发表时间: 2021-12
• 期刊: 2021 IEEE/ACM Symposium on Edge Computing (SEC)
• 作者: Jinghui Liao;Bo Chen;Weisong Shi

Speedster: An Efficient Multi-party State Channel via Enclaves

• DOI: 10.1145/3488932.3523259
• 发表时间: 2022-05
• 期刊: Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security
• 作者: Jinghui Liao;Fengwei Zhang;Wenhai Sun;Weisong Shi