SHF: Small: System-Level Design of Attack-Resistant Safety-Critical Systems

SHF：小型：抗攻击安全关键系统的系统级设计

• 批准号: 2002854
• 负责人: Marilyn Wolf
• 金额: $ 34.31万
• 依托单位: University of Nebraska-Lincoln
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-10-01 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2002854&HistoricalAwards=false
• 关键词: SHF; Small; System; Level; Design

This project takes a design automation approach to the protection of safety/security-critical cyber-physical (CPS) and Internet-of-Things (IoT) systems against attacks originating from the Internet or from other inappropriate use. CPS and IoT systems connect sophisticated computer networks to physical world objects and machines. This combination poses new concerns over information security and physical safety than are posed by traditional information technology (IT) systems. This project will develop methodologies, algorithms, and tools for the design of safety-critical systems, including both multiprocessor systems-on-chips (MPSoCs) and networked control systems. Threats may come from information security vulnerabilities as well as safety-related faults. The methodologies and tools developed by this project will enable system designers to harden their designs against known attacks. These methods can also be used after system deployment to redesign system components to reduce their vulnerability to emergent threats. The project would also help develop new curriculum and train US workforce in the important area of information security and would be inclusive of the women, minority, and underrepresented groups in this endeavor.This project develops a new methodology for attack-aware design for safety-critical cyber-physical and Internet-of-Things (IoT) systems. A formal, multilayer model is used to describe the system. New design-time re-synthesis methods analyze the system for potential attacks and modify the system to mitigate the attacks. The methodology considers both functional attacks and timing-oriented quality-of-service attacks. Mitigations may be applied at multiple levels: middleware, operating system, and hardware. Attack mitigation is posed as an optimization problem. A set of mitigations is selected based on cost and on the number of mitigations applied for each valid computation. The methodology is applicable to networked systems at multiple scales, including both multiprocessor systems-on-chips used in smartphones and networked control systems.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该项目采用设计自动化方法来保护安全/安保关键型网络物理(CPS)和物联网(IoT)系统免受来自互联网或其他不当使用的攻击。CPS和物联网系统将复杂的计算机网络连接到现实世界的对象和机器。与传统信息技术(IT)系统相比，这种组合对信息安全和物理安全提出了新的担忧。该项目将开发用于设计安全关键系统的方法、算法和工具，包括多处理器片上系统(MPSoC)和网络控制系统。威胁可能来自信息安全漏洞以及与安全相关的故障。该项目开发的方法和工具将使系统设计人员能够加强他们的设计，以抵御已知的攻击。这些方法也可以在系统部署后用于重新设计系统组件，以降低其对紧急威胁的脆弱性。该项目还将帮助开发新的课程，并在重要的信息安全领域培训美国劳动力，并将包括这一努力中的女性、少数群体和代表性不足的群体。该项目为安全关键型网络物理和物联网(IoT)系统的攻击感知设计开发了一种新的方法。一个形式化的、多层的模型被用来描述系统。新的设计时重新综合方法分析系统的潜在攻击，并修改系统以减轻攻击。该方法同时考虑了功能性攻击和面向时间的服务质量攻击。缓解措施可以应用于多个级别：中间件、操作系统和硬件。攻击缓解被认为是一个优化问题。基于成本和应用于每个有效计算的减轻次数来选择一组减轻。该方法适用于多个规模的网络系统，包括用于智能手机的多处理器片上系统和网络控制系统。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。