CICI: TCR: A Unified Monitoring Approach to Enhancing the Security and Resiliency of Hazard Workflows on Heterogeneous Infrastructures

CICI：TCR：增强异构基础设施上危险工作流程的安全性和弹性的统一监控方法

• 批准号: 2319944
• 负责人: Sudarsun Kannan
• 金额: $ 117.02万
• 依托单位: Rutgers University New Brunswick
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-10-01 至 2026-09-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2319944&HistoricalAwards=false
• 关键词: CICI; TCR; Unified; Monitoring; Approach

Climate change and natural hazards present significant dangers to both humanity and critical cyberinfrastructures (CI). In response, the Earth Sciences community has adopted a cross-boundary approach to monitoring and mitigating these threats by developing CI and workflows that encompass sensors, edge computing nodes, network backbones, and remote cloud data centers. Unfortunately, this cross-boundary approach is vulnerable to both physical (resiliency) and cyber (security) threats. Current state-of-the-art techniques for addressing these threats take a fragmented approach, focusing on specific resources and proving ineffective for the overall hazard workflow. This project proposes the HazardMon framework, which scales horizontally (from sensors to edge cloud to WAN backbones to remote cloud) and vertically (across all layers of the hardware and software stack) to combat these two threats. The project will open-source HazardMon, and results will be disseminated to the community. The broadening participation activities in this project will catalyze community engagement and experiential learning, resulting in a globally competitive workforce. The project will also collaborate with stakeholders, particularly the NSF SAGE project, to facilitate the practical implementation of these ideas.HazardMon will adopt an interdisciplinary approach that encompasses computer and earth sciences across Rutgers and the University of Oregon, addressing the two threats through three main thrusts. First, HazardMon will utilize the NSF-funded Parasol micro-datacenter to identify threat telemetry for various representative hazard scenarios. Additionally, it will include a monitoring service to observe diverse sensors, WAN backbones, and remote cloud/HPC backends based on the identified telemetry. Second, HazardMon will focus on intelligent techniques to filter and process threat telemetry at the edge, distinguishing between threat telemetry and hazard workflow data. Third, HazardMon will incorporate workflow-specific configuration spaces to develop resilience strategies that mitigate physical threats across CI resources and workflows. Furthermore, it will feature a three-layered mitigation solution to address cyber threats.This award by the NSF Office of Advanced Cyberinfrastructure is also supported by National Discovery Cloud for Climate (NDC-C) resources.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

气候变化和自然灾害对人类和关键的网络基础设施都构成了重大威胁。作为回应，地球科学界采用了一种跨边界的方法来监测和缓解这些威胁，方法是开发包含传感器、边缘计算节点、网络骨干和远程云数据中心的CI和工作流。不幸的是，这种跨界方法容易受到物理（弹性）和网络（安全）威胁的影响。目前应对这些威胁的最先进技术采取了分散的方法，侧重于特定资源，对整个危害工作流程无效。该项目提出了HazardMon框架，该框架可以横向扩展（从传感器到边缘云到WAN骨干网到远程云）和纵向扩展（跨硬件和软件堆栈的所有层），以应对这两种威胁。该项目将开源HazardMon，并将结果传播给社区。在这个项目中扩大参与活动将促进社区参与和体验式学习，从而产生具有全球竞争力的劳动力。该项目还将与利益相关者合作，特别是NSF SAGE项目，以促进这些想法的实际实施。HazardMon将采用跨学科的方法，包括罗格斯大学和俄勒冈州大学的计算机和地球科学，通过三个主要重点解决这两个威胁。首先，HazardMon将利用NSF资助的Parasol微型数据中心来识别各种代表性危险场景的威胁遥测。此外，它还将包括一项监控服务，以根据确定的遥测数据观察各种传感器、WAN骨干网和远程云/HPC后端。其次，HazardMon将专注于在边缘过滤和处理威胁遥测的智能技术，区分威胁遥测和危险工作流数据。第三，HazardMon将整合特定于工作流程的配置空间，以制定弹性策略，从而缓解CI资源和工作流程中的物理威胁。该奖项由NSF高级网络基础设施办公室（Office of Advanced Cyberinfrastructure）颁发，并得到了国家气候探索云（NDC-C）资源的支持。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。