Security for Pervasive Edge Computing Ecosystems

普及边缘计算生态系统的安全性

• 批准号: 2028797
• 负责人: Satyajayant Misra
• 金额: $ 5.66万
• 依托单位: New Mexico State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2020
• 资助国家: 美国
• 起止时间: 2020-08-01 至 2022-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2028797&HistoricalAwards=false
• 关键词: Security; Pervasive; Edge; Computing; Ecosystems

Diverse, novel applications, such as autonomous driving, Industrial Internet of Things (IIoT), Augmented and Virtual Reality (AR/VR), tele-medicine, and distributed machine learning are driving the rapid growth in research and development in edge computing deployed in the last mile of the network where dynamic and resource constrained wireless communications dominate. These applications require computation to happen close to the data source and be coordinated across nearby devices, base stations, or access points as well as with data services such as stored media download at the edge. They may also require computation offloading to a data center located near the edge or somewhere on the Internet for processes such as image annotation and machine learning. Furthermore, these applications rely on ultra-low latency communications, reliable computations, and security and privacy at the network edge. This project aims to investigate the vision of a secure Pervasive Edge Computing (PEC) environment where the abundant edge computing resources (e.g. city infrastructure, individuals’ devices, and future wireless devices), can be easily and securely marshaled, in a trusted manner, to make the participation of any device in edge computing feasible. The particular research problem addressed in this project is access control and authorization of devices and services at the edge—essential for the broad adoption of PEC to meet the needs of future applications in healthcare, transportation, smart cities, and the smart grid. This project focuses on investigating the access control and authorization mechanisms in an information-centric PEC network. The researchers will investigate mechanisms for delegating access control-as-a-service (ACaaS) to the network edge; efficient revocation of access credentials to data and services in a dynamic manner; and secure accounting of the access control operations to verify access control claims of the service and also to assess users’ usage. They will contrast their designs with competing designs in the IP network to provide comprehensive comparative assessments of the efficacy of proposed approaches. The results from this project will help increase the security, adoptability, and trust in edge computing and speed up its adoption by enabling more of the edge devices to become part of edge computing.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

自动驾驶、工业物联网（IIoT）、增强和虚拟现实（AR/VR）、远程医疗和分布式机器学习等各种新颖的应用正在推动部署在网络最后一英里的边缘计算研究和开发的快速增长，其中动态和资源受限的无线通信占主导地位。这些应用程序需要在数据源附近进行计算，并在附近的设备、基站或接入点之间进行协调，以及与数据服务（如在边缘下载存储的媒体）进行协调。它们还可能需要将计算卸载到位于边缘附近或互联网上某处的数据中心，以进行图像注释和机器学习等过程。此外，这些应用依赖于超低延迟通信、可靠计算以及网络边缘的安全性和隐私性。该项目旨在研究一个安全的普适边缘计算（PEC）环境的愿景，在这个环境中，丰富的边缘计算资源（例如城市基础设施，个人设备和未来的无线设备）可以以可信的方式轻松安全地编组，使任何设备都可以参与边缘计算。该项目解决的特定研究问题是边缘设备和服务的访问控制和授权，这对于广泛采用PEC以满足医疗保健、交通、智能城市和智能电网等未来应用的需求至关重要。 本计画主要研究以资讯为中心的PEC网路中的存取控制与授权机制。研究人员将研究将访问控制即服务（ACaaS）委托给网络边缘的机制;以动态方式有效撤销对数据和服务的访问凭证;以及访问控制操作的安全会计，以验证服务的访问控制声明并评估用户的使用情况。 他们将把自己的设计与IP网络中的竞争设计进行对比，以提供对拟议方法的有效性的全面比较评估。该项目的成果将有助于提高边缘计算的安全性、可采用性和信任度，并通过使更多的边缘设备成为边缘计算的一部分来加速其采用。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Robust Revocable Anonymous Authentication for Vehicle to Grid Communications

• DOI: 10.1109/tits.2019.2948803
• 发表时间: 2020-11
• 期刊: IEEE Transactions on Intelligent Transportation Systems
• 影响因子: 8.5
• 作者: Vishnu Teja Kilari;Ruozhou Yu;S. Misra;G. Xue

Analyzing GDPR compliance of named data networking

• DOI: 10.1145/3460417.3482979
• 发表时间: 2021-09
• 期刊: Proceedings of the 8th ACM Conference on Information-Centric Networking
• 作者: Casey Tran;R. Tourani;S. Misra;Travis Machacek;Gaurav Panwar

iCAAP: information-Centric network Architecture for Application-specific Prioritization in Smart Grid

iCAAP：智能电网中特定应用优先级的以信息为中心的网络架构

• 发表时间: 2021
• 期刊: Innovative smart grid technologies
• 作者: James, Anju;Torres, George;Shrestha, Sharad;Tourani, Reza;Misra, Satyajayant
• 通讯作者: Misra, Satyajayant

PERSIA: a PuzzlE-based InteReSt FloodIng Attack Countermeasure

• DOI: 10.1145/3405656.3418709
• 发表时间: 2020-09
• 期刊: Proceedings of the 7th ACM Conference on Information-Centric Networking
• 作者: R. Tourani;George Torres;S. Misra

uDiscover: User-Driven Service Discovery in Pervasive Edge Computing using NDN

uDiscover：使用 NDN 的普适边缘计算中用户驱动的服务发现

• DOI: 10.1109/edge55608.2022.00022
• 发表时间: 2022
• 期刊: 2022 IEEE International Conference on Edge Computing and Communications (EDGE
• 作者: Torres, George;Tourani, Reza;Mtibaa, Abderrahmen;Stelmakh, Diana;Misra, Satyajayant;Srikanteswara, Srikathyayani;Zhang, Yi;Hoque, Sanzida
• 通讯作者: Hoque, Sanzida