Collaborative Research: SaTC: CORE: Medium: Secure and Trustworthy Cyberphysical Microfluidic Systems

该项目的目标是确保网络物理微流控系统的安全性和可信性。微流体学是指在纳升/皮升体积下进行流体操纵的跨学科研究。微流控芯片实验室系统集成了传感器和智能控制，联网进行数据分析，并正在商业化，用于医疗诊断、环境监测和基础实验室研究。这些系统本质上是网络物理系统，不幸的是，它们是在网络安全问题猖獗的时代成熟的。因此，我们预计需要利用微流体、微生物学、硬件设计和网络安全方面的跨学科专业知识来解决新的安全和信任问题。该项目是杜克大学和纽约大学(NYU)的合作项目。它包括四个方面：1)了解安全威胁、动机、攻击面及其对研究环境、行业和社会的影响；2)开发安全和信任技术以预防、检测和缓解这些威胁；3)使用生物分子协议在台式平台上进行实验验证；以及4)使用安全原语制造印刷电路板(PCB)芯片实验室原型。用于实现研究目标的方法将利用研究人员的多学科和协同专业知识：微流控生物芯片、威胁分析和对策；生物方案合成；设计自动化；实验微生物学。该项目将培养学生在硬件设计、计算机辅助设计、分子生物学和安全方面的多学科研究和教育。最终用户采用CPMS的增长和投资将受到知识产权保护的推动。这个项目有可能为新的科技公司铺平道路。在最近许多公开的违反诊断和研究诚信的行为之后，考虑到安全因素而设计的CPMS将恢复信任。这些攻击和防御技术将提交给在纽约大学举行的年度嵌入式系统安全挑战(ESC)，学生硬件黑客正在评估安全技术的优势。所有与该项目相关的数据都将通过DukeSpace存储库https://dukespace.lib.duke.edu/dspace/.传播这些论文都是PDF格式的。支持的数据和元数据格式包括JPEG、PNG、GIF、TIFF、AIFF、MP3、无DRM的AAC MPEG、XML和CSV。随着项目的成熟，用于测试的源代码、输入/输出文件和文档也在发布。所有数据和软件将在杜克大学的网站上维护，这些数据将在项目完成后5年内可用。同样，所有数据和软件将在项目完成后在纽约大学的网站上保留5年。这一奖励反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

The goal of this project is to ensure the security and trustworthiness of cyber-physical microfluidic systems. Microfluidics refers to the interdisciplinary study of fluid manipulation at nanoliter/picoliter volumes. Microfluidic lab-on-chip systems are integrated with sensors and intelligent control, networked for data analysis, and are being commercialized for use in medical diagnostics, environmental monitoring, and basic laboratory research. These systems are cyberphysical in nature and are unfortunately coming of age in an era of rampant cybersecurity issues. Consequently, we anticipate novel security and trust problems that need to be addressed using interdisciplinary expertise in microfluidics, microbiology, hardware design, and cybersecurity. This project is a collaboration between Duke University and New York University (NYU). It includes four thrusts: 1) understanding the security threats, motivations, attack surfaces, and their consequences for the research landscape, industry, and society, 2) developing security and trust techniques to prevent, detect, and mitigate these threats, 3) experimental validation on the benchtop using biomolecular protocols, and 4) fabrication of printed circuit board (PCB) lab-on-chip prototypes with security primitives. The methods used to realize the research goals will draw upon the multidisciplinary and synergistic expertise of the investigators: microfluidic biochips, threat analysis and countermeasures; bioprotocol synthesis; design automation; experimental microbiology. This project will foster multi-disciplinary research and education for students in hardware design, CAD, molecular biology, and security. Growth and investment in CPMS, adoption by end users, will be fostered by intellectual property protection. This project has the potential to pave the way for new tech companies. CPMS designed with security in mind will restore trust after the many recent publicized violations of diagnostic and research integrity. The attacks and defense techniques will be submitted to the annual embedded systems security challenge (ESC) held at NYU, where the strengths of the security techniques are being evaluated by student hardware hackers. All data related to this project will be disseminated through the DukeSpace repository, https://dukespace.lib.duke.edu/dspace/. The papers are all in PDF. Supported formats for data and metadata include JPEG, PNG, GIF, TIFF, AIFF, MP3, DRM-free AAC MPEG, XML and CSV. Source code for testing, input/output files, and documentation are also being released as the project matures. All data and software will be maintained on a Duke website, and this data will be available for 5 years after the project is completed. Similarly, all data and software will be maintained on an NYU website for 5 years after the project is completed.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.