Feasible Cooperative Zero Trust Framework for 5G

5G 可行的合作零信任框架

• 批准号: 49100422C0023
• 金额: $ 73.63万
• 依托单位: BLACKBERRY CORP
• 依托单位国家: 美国
• 项目类别: Contract
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-07-15 至 2023-07-14
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=49100422C0023&HistoricalAwards=false
• 关键词: Feasible; Cooperative; Zero; Trust; Framework

Millions of Americans connect daily to 5G cellular networks through their devices;, however, most are unaware that their connections depend on stacks of software running on legions of networking components. Their security and privacy therefore directly depends on the trustworthiness of this infrastructural software, and yet network customers can do very little themselves to verify the trustworthiness. The user must trust the processes, standards, and regulations used by the network operators and their regulators. As a result, network customers cannot currently extend principles of “Zero Trust” (ZT) to the network; namely, they cannot meaningfully observe and establish a reasoned basis for trust in the software critical to their security and privacy.    Our convergence accelerator team will combine expertise in software security analysis, human-centered design, networking, cybersecurity, standards, laws, and regulations to establish a novel technical foundation for ZT cybersecurity solutions in the context of multi-stakeholder, high-security 5G networks. Called “Cooperative Zero Trust,” (CZT) multiple parties— notably, clients and network operators —will use it to work jointly on continuously assuring trustworthiness of the 5G infrastructure software involved in a client’s network. To develop CZT the team will: (1) develop novel theoretical and technical foundations for CZT solutions and frameworks, including a trustworthy and efficient technical foundation for inserting software monitoring into 5G infrastructure, (2) utilize human-readable technical requirements documents to develop new automated indicators of software trust that are intelligible and actionable, and (3) pave the way for widespread adoption of CZT security technologies by ensuring their pragmatic workability within existing regulatory environments, and designing incentive structures through legal and regulatory framework development, including aligned draft laws and standards.

数百万美国人每天通过他们的设备连接到5G蜂窝网络;然而，大多数人都没有意识到他们的连接依赖于在大量网络组件上运行的软件堆栈。因此，他们的安全性和隐私直接取决于这个基础设施软件的可信度，而网络客户自己几乎无法验证其可信度。用户必须信任网络运营商及其监管机构使用的流程、标准和法规。因此，网络客户目前无法将“零信任”（ZT）原则扩展到网络;也就是说，他们无法有意义地观察和建立对他们的安全和隐私至关重要的软件的合理信任基础。   我们的融合加速器团队将结合联合收割机在软件安全分析、以人为本的设计、网络、网络安全、标准、法律和法规方面的专业知识，为ZT网络安全解决方案在多利益相关方、高安全性5G网络背景下建立新的技术基础。被称为“合作零信任”（CZT）的多方-特别是客户和网络运营商-将使用它来共同努力，不断确保客户网络中涉及的5G基础设施软件的可信度。为了开发CZT，团队将：（1）为CZT解决方案和框架开发新的理论和技术基础，包括将软件监控插入5G基础设施的可靠和有效的技术基础，（2）利用人类可读的技术要求文档开发新的可理解和可操作的软件信任自动化指标，以及（3）通过确保CZT安全技术在现有监管环境中的实用可行性，并通过制定法律的和监管框架（包括协调一致的法律和标准草案）设计激励结构，为CZT安全技术的广泛采用铺平道路。