CAREER: System Software Availability Foundations for Real-time Cyber-physical Systems

职业：实时网络物理系统的系统软件可用性基础

• 批准号: 2238635
• 负责人: Ning Zhang
• 金额: $ 52.1万
• 依托单位: Washington University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-06-01 至 2028-05-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2238635&HistoricalAwards=false
• 关键词: CAREER; System; Software; Availability; Foundations

As computing and communication are ever more embedded in our society, the security and, in particular, the availability (timely access to computational resources) of cyber-physical systems (CPS), such as autonomous vehicles and surgical robots, is essential for our livelihood. The key novelty of the project is a principled approach to tackle the availability challenges of CPS by systematically addressing threats from different vulnerable layers that make up a computer system. The project's broader significance and importance lie in the development of new theories and systems for system availability, building the foundation for security and safety in CPS, which our society now relies on for daily necessities. This project broadens participation not only in the field of CPS security but also in computing, through integrated educational activities for students from diverse backgrounds in both K-12 and higher education. Threats from different layers of computing against system availability motivate the research thrusts in this project, advancing three lines of defense. The first line of defense tackles the long-standing problem of availability in trusted execution environments to provide computational and input/output (I/O) availability in the presence of an untrusted operating system (OS) while minimizing the trusted computing base by leveraging the unique predictability of real-time CPS. The second line of defense tackles a new dimension (availability) in software protection by leveraging context-sensitive software compartmentalization and rapid recovery to preserve safety-critical process availability at the cost of functionality reduction. The last line of defense formalizes, analyzes, and isolates the performance interference as a security (availability) problem, thwarting attacks from the non-safety-critical processes to the safety-critical processes. The open platform (OP) for CPS security research (OP-CPS) not only allows scientific exploration within the project but also tightly integrates education and research, enabling the connections between the real-time, robotics, control, systems, and security communities.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

随着计算和通信越来越深入我们的社会，安全，特别是网络物理系统（CPS）的可用性（及时访问计算资源），如自动驾驶汽车和手术机器人，对我们的生活至关重要。该项目的主要新颖之处在于，通过系统地解决构成计算机系统的不同易受攻击层的威胁，采用原则性方法来解决CPS的可用性挑战。该项目更广泛的意义和重要性在于为系统可用性开发新的理论和系统，为CPS的安全与安全奠定基础，这是我们社会日常生活必需品。该项目通过为K-12和高等教育的不同背景的学生提供综合教育活动，不仅扩大了CPS安全领域的参与，而且扩大了计算机领域的参与。来自不同计算层的对系统可用性的威胁激发了本项目的研究重点，推进了三道防线。第一道防线解决了可信执行环境中存在已久的可用性问题，在存在不可信操作系统（OS）的情况下提供计算和输入/输出（I/O）可用性，同时通过利用实时CPS的独特可预测性来最小化可信计算基础。第二道防线处理软件保护中的一个新维度（可用性），它利用上下文敏感的软件划分和快速恢复，以减少功能为代价来保持安全关键流程的可用性。最后一道防线将性能干扰形式化、分析并隔离为安全（可用性）问题，阻止从非安全关键进程对安全关键进程的攻击。CPS安全研究开放平台（OP）不仅可以在项目内进行科学探索，还可以将教育和研究紧密结合，实现实时，机器人，控制，系统和安全社区之间的连接。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。