SaTC: CORE: Small: Mitigating Threats of Physical-Domain Signal Injections on Security, Reliability, and Safety of Sensing and Control Systems

SaTC：核心：小型：减轻物理域信号注入对传感和控制系统的安全性、可靠性和安全性的威胁

• 批准号: 2231682
• 负责人: Xiali Hei
• 金额: $ 60万
• 依托单位: University of Louisiana at Lafayette
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-07-01 至 2026-06-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2231682&HistoricalAwards=false
• 关键词: SaTC; CORE; Small; Mitigating; Threats

Light, motion, and sound sensors are used in many applications, such as smart homes, self-driving cars, and industrial control systems. As with many computing technologies, sensors can be vulnerable to attacks. In particular, attackers may try to inject false information into sensors; this could lead to the cyber-physical systems they rely on having an incorrect model of the world, in turn affecting these systems’ reliability and safety. This project’s goal is to detect and mitigate those attacks, based on the fundamental insight that the underlying physics of light, motion, and sound can be used to detect inconsistent signals. Developing methods that use physical properties to detect possible attacks, as well as sensor noise and errors, can lead to safer and more robust cyber-physical systems. The planned work will support a number of post-graduate, graduate, undergraduate, and high school educational activities through integrating projects with coursework and research projects, while developing research tools, testbeds, and datasets that can be used by others for both research and education.This project aims to secure sensor-based systems with untrustworthy analog sensing components through three research thrusts. The first thrust involves determining how to reliably detect and mitigate transducer-stage o ut-of-band acoustic injections on inertial sensors, through embedding modulated patterns at the digitization stage of out-of-band signals and develops robust inertial sensing on multiple sensors. The second thrust explores defenses against light-based attacks on cameras to secure vision systems, modeling threats of light injections that exploit the same modality (i.e., light) as image sensors and utilizing adversarial optical physics to defend against various light injections. The third thrust will develop testbeds, tools, datasets, procedures, and metrics to test, improve, and validate sensing system security and reliability under physical-domain signal injection attacks. Together, the project outcomes will provide direct help to secure kinematics-based sensing and actuation systems, as well as autonomous vehicle, against various adversarial injection attacks.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

光、运动和声音传感器用于许多应用，例如智能家居、自动驾驶汽车和工业控制系统。与许多计算技术一样，传感器很容易受到攻击。特别是，攻击者可能会试图向传感器注入虚假信息；这可能导致他们所依赖的网络物理系统有一个错误的世界模型，进而影响这些系统的可靠性和安全性。这个项目的目标是检测和减轻这些攻击，基于光、运动和声音的基本物理原理，可以用来检测不一致的信号。开发利用物理特性来检测可能的攻击以及传感器噪声和错误的方法，可以导致更安全和更强大的网络物理系统。计划中的工作将通过将项目与课程作业和研究项目相结合，支持一些研究生、研究生、本科生和高中教育活动，同时开发研究工具、测试平台和数据集，供其他人用于研究和教育。该项目旨在通过三个研究重点来确保基于传感器的系统具有不可信的模拟传感组件。首先，通过在带外信号的数字化阶段嵌入调制模式，确定如何可靠地检测和减轻惯性传感器上的传感器级带外声注入，并在多个传感器上开发鲁棒惯性传感。第二个重点探讨了对摄像机的基于光的攻击的防御，以保护视觉系统，建模利用与图像传感器相同的模态（即光）的光注入威胁，并利用对抗性光学物理来防御各种光注入。第三个重点将开发测试平台、工具、数据集、程序和度量，以测试、改进和验证物理域信号注入攻击下传感系统的安全性和可靠性。总之，项目成果将为基于运动学的传感和驱动系统以及自动驾驶车辆提供直接帮助，以抵御各种对抗性注入攻击。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Auditory Eyesight: Demystifying μs-Precision Keystroke Tracking Attacks on Unconstrained Keyboard Inputs

• 发表时间: 2023
• 作者: Yazhou Tu;Liqun Shan;Md. Imran Hossen;Sara Rampazzi;Kevin R. B. Butler;X. Hei

Towards Adversarial Process Control on Inertial Sensor Systems with Physical Feedback Side Channels

• DOI: 10.1145/3605758.3623494
• 发表时间: 2023-11
• 期刊: Proceedings of the 5th Workshop on CPS&IoT Security and Privacy
• 作者: Yazhou Tu;Sara Rampazzi;X. Hei