Collaborative Research: SaTC: CORE: Medium: Secure and Trustworthy Cyberphysical Microfluidic Systems

该项目的目标是确保网络物理微流控系统的安全性和可靠性。微流体是指在纳升/皮升体积下对流体操纵的跨学科研究。微流控芯片实验室系统集成了传感器和智能控制，联网进行数据分析，并正在商业化应用于医疗诊断、环境监测和基础实验室研究。这些系统本质上是网络物理的，不幸的是，它们在网络安全问题猖獗的时代成熟了。因此，我们预计需要利用微流体、微生物学、硬件设计和网络安全方面的跨学科专业知识来解决新的安全和信任问题。该项目是杜克大学和纽约大学（NYU）的合作项目。它包括四个重点：1)了解安全威胁、动机、攻击面及其对研究领域、行业和社会的影响；2)开发安全和信任技术来预防、检测和减轻这些威胁；3)使用生物分子协议在台式上进行实验验证；4)制造具有安全原语的印刷电路板（PCB）芯片实验室原型。实现研究目标的方法将利用研究人员的多学科和协同专业知识：微流控生物芯片，威胁分析和对策；生物协定合成;设计自动化;微生物学实验。该项目将促进硬件设计、计算机辅助设计、分子生物学和安全等多学科的研究和教育。知识产权保护将促进CPMS的增长和投资，以及最终用户的采用。这个项目有可能为新科技公司铺平道路。考虑到安全性的CPMS设计将在最近许多公开的违反诊断和研究完整性的行为之后恢复信任。攻击和防御技术将提交给在纽约大学举行的年度嵌入式系统安全挑战（ESC），在那里，安全技术的优势将由学生硬件黑客进行评估。与此项目相关的所有数据将通过DukeSpace存储库https://dukespace.lib.duke.edu/dspace/传播。论文都是PDF格式的。支持的数据和元数据格式包括JPEG， PNG， GIF， TIFF， AIFF, MP3，无drm的AAC MPEG， XML和CSV。测试源代码、输入/输出文件和文档也会随着项目的成熟而发布。所有数据和软件将保存在杜克大学的网站上，这些数据将在项目完成后的5年内可用。同样，项目完成后，所有数据和软件将在纽约大学网站上保存5年。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The goal of this project is to ensure the security and trustworthiness of cyber-physical microfluidic systems. Microfluidics refers to the interdisciplinary study of fluid manipulation at nanoliter/picoliter volumes. Microfluidic lab-on-chip systems are integrated with sensors and intelligent control, networked for data analysis, and are being commercialized for use in medical diagnostics, environmental monitoring, and basic laboratory research. These systems are cyberphysical in nature and are unfortunately coming of age in an era of rampant cybersecurity issues. Consequently, we anticipate novel security and trust problems that need to be addressed using interdisciplinary expertise in microfluidics, microbiology, hardware design, and cybersecurity. This project is a collaboration between Duke University and New York University (NYU). It includes four thrusts: 1) understanding the security threats, motivations, attack surfaces, and their consequences for the research landscape, industry, and society, 2) developing security and trust techniques to prevent, detect, and mitigate these threats, 3) experimental validation on the benchtop using biomolecular protocols, and 4) fabrication of printed circuit board (PCB) lab-on-chip prototypes with security primitives. The methods used to realize the research goals will draw upon the multidisciplinary and synergistic expertise of the investigators: microfluidic biochips, threat analysis and countermeasures; bioprotocol synthesis; design automation; experimental microbiology. This project will foster multi-disciplinary research and education for students in hardware design, CAD, molecular biology, and security. Growth and investment in CPMS, adoption by end users, will be fostered by intellectual property protection. This project has the potential to pave the way for new tech companies. CPMS designed with security in mind will restore trust after the many recent publicized violations of diagnostic and research integrity. The attacks and defense techniques will be submitted to the annual embedded systems security challenge (ESC) held at NYU, where the strengths of the security techniques are being evaluated by student hardware hackers. All data related to this project will be disseminated through the DukeSpace repository, https://dukespace.lib.duke.edu/dspace/. The papers are all in PDF. Supported formats for data and metadata include JPEG, PNG, GIF, TIFF, AIFF, MP3, DRM-free AAC MPEG, XML and CSV. Source code for testing, input/output files, and documentation are also being released as the project matures. All data and software will be maintained on a Duke website, and this data will be available for 5 years after the project is completed. Similarly, all data and software will be maintained on an NYU website for 5 years after the project is completed.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.