Collaborative Research: SaTC: CORE: Medium: Safeguarding Next-Generation Emergency Services (NG-9-1-1) over Cellular Networks: From Design to Practice

下一代9-1-1（NG-9-1-1）服务是基于IP的系统，其支持所有类型的紧急通信，例如，语音、视频和文本。全球部署的5G/4G蜂窝网络具有无处不在的覆盖范围，是最容易获得紧急服务的工具。然而，基于IP的蜂窝紧急服务的安全性在很大程度上仍然是未开发的。由于911服务对我们的社会至关重要，因此消除潜在的漏洞并确保其安全性至关重要。 该项目旨在保护NG-9-1-1在蜂窝网络上从设计到运营的服务。该项目的创新之处在于系统地发现蜂窝紧急服务的不安全设计缺陷、操作失误和实施缺陷，同时通过多学科方法确保可持续的安全性。该项目的更广泛的意义和重要性是通过探索新的方法，可以帮助执行创新的应急服务建模，漏洞分析，数据收集/挖掘和测试自动化解决方案，将最先进的应急服务安全研究扩展到一个新的前沿。该项目还旨在通过对学生进行网络安全、无线和移动的系统以及机器学习等关键领域的培训，为国家未来的劳动力做出贡献。该项目包括三个研究方向：（1）开发发现蜂窝紧急服务设计缺陷的新技术。这一推力将建立一个新的多层次的紧急服务验证，采用和应用模型检查技术，正式检查多样化的蜂窝紧急服务规范，要求和法规有效;（2）创建新的技术，可以分析和识别紧急服务的实现问题和潜在的操作失误。将开发软件定义无线电NG-9-1-1服务平台。 将建立一个全面的测试数据集，以涵盖异常和正常使用场景;（3）建立NG-9-1-1业务测试平台，实现自动检查和后续再测试。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The next-generation 9-1-1 (NG-9-1-1) services are IP-based systems that supports all types of emergency communications, e.g., voice, video, and text. The globally deployed 5G/4G cellular networks with ubiquitous coverage are the most accessible vehicles for emergency services. However, the security of IP-based cellular emergency services is still largely unexplored. Since 911 services are critical to our society, it is extremely important to eliminate potential vulnerabilities and ensure their security. This project aims to safeguard NG-9-1-1 services over cellular networks from their designs to operations. The project's novelties are to systematically uncover insecure design defects, operational slips, and implementation flaws of cellular emergency services while ensuring sustainable security through a multi-disciplinary approach. The project's broader significance and importance are to extend the state-of-the-art emergency service security research to a new frontier by exploring novel methods that can help perform innovative emergency service modeling, vulnerability analysis, data collection/mining, and testing automation solutions. The project also aims to contribute to nation's future workforce by training students in critical areas such as network security, wireless and mobile systems, and machine learning.This project comprises three research thrusts: (1) to develop new techniques for discovering design flaws of cellular emergency services. This thrust will build a novel multi-level emergency service verifier that adopts and applies model-checking techniques to formally examine diversified cellular emergency service specifications, requirements, and regulations efficiently; (2) to create new techniques that can analyze and identify both implementation issues and potential operational slips of emergency services. A software-defined-radio NG-9-1-1 service platform will be developed. A comprehensive testing dataset will be built to cover both abnormal and normal use scenarios; and (3) to build an NG-9-1-1 service testing platform that allows automatic checking and follow-on re-examination of discovered vulnerabilities to ensure sustainable security.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.