CAREER: Compositional IoT Safety and Security in Physical Spaces

职业：物理空间中的组合物联网安全和安保

• 批准号: 2144645
• 负责人: Zeynel Celik
• 金额: $ 55.18万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-07-01 至 2027-06-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2144645&HistoricalAwards=false
• 关键词: CAREER; Compositional; IoT; Safety; Security

The inevitable integration of many individual system components programmed independently into the Internet of Things (IoT) systems has brought new challenges that require urgent attention. The main challenge is to produce proofs of correctness that ensure the composite behavior of IoT devices in physical spaces - the environment in which they operate - adheres to desired safety and security policies. Recent research in systems security introduced methods to synthesize IoT implementations that guarantee a range of safety and security policies. These approaches focus either on policy specification and verification of individual components in isolation of each other or ensure security through models solely abstracted from the source code of programs. Despite the success of past research, there is a significant gap in developing theory and practice that indicates how the behavior of each device can be unified to formally reason about the safety and security of IoT systems in practice. This project integrates research activities aimed at designing and developing algorithms and tools that formally produce the composite behavior of an IoT system and a rigorous foundation for reasoning about an IoT environment's global safety and security. The results of this project will ultimately enhance the current verification and validation practices of IoT systems and build trust in national infrastructure and protect citizens.The specific goals of the project are divided into three research thrusts. The first thrust focuses on constructing a novel composite model by unifying the behavior of individual system components through a combination of static analysis and system identification techniques to represent an IoT system's global behavior. The second thrust aims to establish a rigorous foundation for identifying physical behavior-based policies and developing formal analysis techniques that ensure an IoT system adheres to safety and security policies. The last thrust seeks to establish a series of techniques to make model construction and policy validation scalable and exhaustive in diverse IoT systems. A common theme in all research directions is the adaptive creation and disposal of system components that allow for flexible configuration of added, removed, and updated IoT devices, programs, and environmental changes. Thus, the research activities will apply to existing software systems and guide future system designs.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

许多独立编程的独立系统组件不可避免地集成到物联网(IoT)系统中，这带来了需要迫切关注的新挑战。主要挑战是提供正确性证明，以确保物联网设备在物理空间-它们所在的环境-的复合行为符合预期的安全和安保策略。最近对系统安全的研究引入了综合物联网实施的方法，以保证一系列安全和安保策略。这些方法要么专注于相互隔离的单个组件的策略规范和验证，要么通过仅从程序源代码中抽象的模型来确保安全性。尽管过去的研究取得了成功，但在开发理论和实践方面仍存在显著差距，这些理论和实践表明，如何将每个设备的行为统一起来，以在实践中对物联网系统的安全性进行正式推理。该项目整合了旨在设计和开发算法和工具的研究活动，这些算法和工具正式生成物联网系统的复合行为，并为物联网环境的全球安全和安保推理奠定了严格的基础。该项目的成果将最终加强当前物联网系统的验证和验证实践，并建立对国家基础设施的信任，保护公民。该项目的具体目标分为三个研究推动力。第一个重点是通过结合静态分析和系统识别技术来统一单个系统组件的行为来构建一个新的复合模型，以表示物联网系统的全局行为。第二个重点旨在为识别基于物理行为的策略和开发确保物联网系统遵守安全和安保策略的正式分析技术奠定严格的基础。最后一个重点是建立一系列技术，使模型构建和策略验证在不同的物联网系统中可扩展和详尽。所有研究方向的一个共同主题是自适应地创建和处置系统组件，允许灵活配置添加、删除和更新的物联网设备、程序和环境变化。因此，研究活动将适用于现有的软件系统并指导未来的系统设计。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

That Person Moves Like A Car: Misclassification Attack Detection for Autonomous Systems Using Spatiotemporal Consistency

• 发表时间: 2023
• 作者: Yanmao Man;Raymond Muller;Ming Li;Z. B. Celik;Ryan M. Gerdes

LocIn: Inferring Semantic Location from Spatial Maps in Mixed Reality

• 发表时间: 2023
• 作者: Habiba Farrukh;Reham Mohamed;Aniket Nare;Antonio Bianchi;Z. Berkay Celik

Discovering IoT Physical Channel Vulnerabilities

• DOI: 10.1145/3548606.3560644
• 发表时间: 2021-02
• 期刊: Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security
• 作者: Muslum Ozgur Ozmen;Xuansong Li;A. Chu;Z. Berkay Celik;Bardh Hoxha;X. Zhang

iSTELAN: Disclosing Sensitive User Information by Mobile Magnetometer from Finger Touches

• DOI: 10.56553/popets-2023-0042
• 发表时间: 2023-04
• 期刊: Proc. Priv. Enhancing Technol.
• 作者: Reham Mohamed;Habiba Farrukh;Yi-Wei Lu;He Wang;Z. Berkay Celik

One Key to Rule Them All: Secure Group Pairing for Heterogeneous IoT Devices

• DOI: 10.1109/sp46215.2023.10179369
• 发表时间: 2023-05
• 期刊: 2023 IEEE Symposium on Security and Privacy (SP)
• 作者: Habiba Farrukh;Muslum Ozgur Ozmen;Faik Kerem Ors;Z. Berkay Celik