CREST-PRF: Access Control Framework for IoT Ecosystem with Smart Home IoT and Industrial IoT Case Studies

CREST-PRF：具有智能家居物联网和工业物联网案例研究的物联网生态系统访问控制框架

• 批准号: 2112590
• 负责人: Safwa Ameer
• 金额: $ 20万
• 依托单位: Ameer, Safwa
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2021
• 资助国家: 美国
• 起止时间: 2021-12-15 至 2023-11-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2112590&HistoricalAwards=false
• 关键词: CREST; PRF; Access; Control; Framework

The Centers of Research Excellence in Science and Technology-Postdoctoral Research Fellowship (CREST-PRF) track within the CREST program supports beginning CREST Center investigators with significant potential and provides them with training and research experiences that will broaden perspectives, facilitate interdisciplinary interactions, and establish them in positions of leadership within the scientific community. This CREST-PRF project is aligned with the research focus of the CREST Center for Security and Privacy Enhanced Cloud Computing (C-SPECC) at the University of Texas San Antonio. The goal of this research is to fill the gap in Access Control in the rapidly growing domains of smart home Internet of Things (IoT) and Industrial Internet of Things (IIoT)This project will systematically investigate smart home IoT and Industrial IoT (IIoT) domains to develop formal scientific foundations and models for Access Control (AC). The proposed work will design and/or adapt appropriate access control-oriented architecture for each domain. The AC requirements and challenges for the layers in each architecture will be investigated and an AC framework described for the interactions between layers. AC models for the interactions between each layer will be described. The PI will develop teaching and mentoring skills, obtain additional specialization, and obtain guidance with respect to the faculty search process. The proposed work has the potential to establish an independent research pathway for the postdoctoral research fellow.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

卓越研究中心在科学和技术博士后研究奖学金（CREST-PRF）的CREST计划内的轨道支持开始CREST中心研究人员具有显着的潜力，并为他们提供培训和研究经验，将拓宽视野，促进跨学科的互动，并建立他们在科学界的领导地位。该CREST-PRF项目与德克萨斯大学圣安东尼奥的CREST安全和隐私增强云计算中心（C-SPECC）的研究重点保持一致。本研究的目标是填补快速增长的智能家居物联网（IoT）和工业物联网（IIoT）领域中访问控制的差距。本项目将系统地研究智能家居物联网和工业物联网（IIoT）领域，为访问控制（AC）开发正式的科学基础和模型。拟议的工作将设计和/或适应适当的访问控制为导向的架构，为每个域。AC的要求和挑战，在每个架构中的层将进行调查和AC框架描述层之间的相互作用。将描述每层之间相互作用的AC模型。PI将发展教学和指导技能，获得额外的专业化，并获得关于教师搜索过程的指导。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Attributes Aware Relationship-based Access Control for Smart IoT Systems

• DOI: 10.1109/cic56439.2022.00021
• 发表时间: 2022-12
• 期刊: 2022 IEEE 8th International Conference on Collaboration and Internet Computing (CIC)
• 作者: Lopamudra Praharaj;Safwa Ameer;Maanak Gupta;R. Sandhu

Utilizing The DLBAC Approach Toward a ZT Score-based Authorization for IoT Systems

利用 DLBAC 方法为物联网系统提供基于 ZT 分数的授权

• DOI: 10.1145/3577923.3585046
• 发表时间: 2023
• 期刊: CODASPY '23: Proceedings of the Thirteenth ACM Conference on Data and Application Security and Privacy
• 作者: Ameer, Safwa;Krishnan, Ram;Sandhu, Ravi;Gupta, Maanak
• 通讯作者: Gupta, Maanak

BlueSky: Towards Convergence of Zero Trust Principles and Score-Based Authorization for IoT Enabled Smart Systems

• DOI: 10.1145/3532105.3535020
• 发表时间: 2022-06
• 期刊: Proceedings of the 27th ACM on Symposium on Access Control Models and Technologies
• 作者: Safwa Ameer;Maanak Gupta;Smriti Bhatt;R. Sandhu

Hybrid Approaches (ABAC and RBAC) Toward Secure Access Control in Smart Home IoT

• DOI: 10.1109/tdsc.2022.3216297
• 发表时间: 2023-09
• 期刊: IEEE Transactions on Dependable and Secure Computing
• 影响因子: 7.3
• 作者: Safwa Ameer;James O. Benson;R. Sandhu