CICI: TCR: A Unified Monitoring Approach to Enhancing the Security and Resiliency of Hazard Workflows on Heterogeneous Infrastructures

CICI：TCR：增强异构基础设施上危险工作流程的安全性和弹性的统一监控方法

• 批准号: 2319944
• 负责人: Sudarsun Kannan
• 金额: $ 117.02万
• 依托单位: Rutgers University New Brunswick
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-10-01 至 2026-09-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2319944&HistoricalAwards=false
• 关键词: CICI; TCR; Unified; Monitoring; Approach

Climate change and natural hazards present significant dangers to both humanity and critical cyberinfrastructures (CI). In response, the Earth Sciences community has adopted a cross-boundary approach to monitoring and mitigating these threats by developing CI and workflows that encompass sensors, edge computing nodes, network backbones, and remote cloud data centers. Unfortunately, this cross-boundary approach is vulnerable to both physical (resiliency) and cyber (security) threats. Current state-of-the-art techniques for addressing these threats take a fragmented approach, focusing on specific resources and proving ineffective for the overall hazard workflow. This project proposes the HazardMon framework, which scales horizontally (from sensors to edge cloud to WAN backbones to remote cloud) and vertically (across all layers of the hardware and software stack) to combat these two threats. The project will open-source HazardMon, and results will be disseminated to the community. The broadening participation activities in this project will catalyze community engagement and experiential learning, resulting in a globally competitive workforce. The project will also collaborate with stakeholders, particularly the NSF SAGE project, to facilitate the practical implementation of these ideas.HazardMon will adopt an interdisciplinary approach that encompasses computer and earth sciences across Rutgers and the University of Oregon, addressing the two threats through three main thrusts. First, HazardMon will utilize the NSF-funded Parasol micro-datacenter to identify threat telemetry for various representative hazard scenarios. Additionally, it will include a monitoring service to observe diverse sensors, WAN backbones, and remote cloud/HPC backends based on the identified telemetry. Second, HazardMon will focus on intelligent techniques to filter and process threat telemetry at the edge, distinguishing between threat telemetry and hazard workflow data. Third, HazardMon will incorporate workflow-specific configuration spaces to develop resilience strategies that mitigate physical threats across CI resources and workflows. Furthermore, it will feature a three-layered mitigation solution to address cyber threats.This award by the NSF Office of Advanced Cyberinfrastructure is also supported by National Discovery Cloud for Climate (NDC-C) resources.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

气候变化和自然灾害对人类和关键网络基础设施 (CI) 都构成重大危险。作为回应，地球科学界采用了跨界方法，通过开发涵盖传感器、边缘计算节点、网络主干和远程云数据中心的 CI 和工作流程来监控和减轻这些威胁。不幸的是，这种跨界方法很容易受到物理（弹性）和网络（安全）威胁。当前解决这些威胁的最先进技术采用的是分散的方法，专注于特定资源，并且事实证明对整个危险工作流程无效。该项目提出了 HazardMon 框架，该框架可水平扩展（从传感器到边缘云、广域网主干网再到远程云）和垂直扩展（跨硬件和软件堆栈的所有层），以应对这两种威胁。该项目将开源 HazardMon，结果将发布给社区。该项目扩大参与活动将促进社区参与和体验式学习，从而形成具有全球竞争力的劳动力队伍。该项目还将与利益相关者特别是 NSF SAGE 项目合作，以促进这些想法的实际实施。HazardMon 将采用跨学科方法，涵盖罗格斯大学和俄勒冈大学的计算机和地球科学，通过三个主要推动力应对这两个威胁。首先，HazardMon 将利用 NSF 资助的 Parasol 微型数据中心来识别各种代表性危险场景的威胁遥测。此外，它将包括一项监控服务，用于根据已识别的遥测数据观察不同的传感器、WAN 主干网和远程云/HPC 后端。其次，HazardMon 将专注于在边缘过滤和处理威胁遥测的智能技术，区分威胁遥测和危险工作流程数据。第三，HazardMon 将整合特定于工作流程的配置空间，以开发弹性策略，以减轻跨 CI 资源和工作流程的物理威胁。此外，它将采用三层缓解解决方案来应对网络威胁。该奖项由 NSF 高级网络基础设施办公室颁发，还得到国家气候发现云 (NDC-C) 资源的支持。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。