Cyber-Physical Security for Critical Internet-of-Things Infrastructures

机器对机器通信正在进入一个被称为物联网 (IoT) 的新时代，其中物理设备通过网络空间广泛联网，在智能家居助理、自动化工厂和自动驾驶汽车等各种应用中创建以数据为中心的智能。然而，这种无处不在的网络物理集成也从网络层和物理层产生了复杂的安全问题。从金融行业违规行为到针对物联网的 Stuxnet、BlackEnergy 和 Mirai 僵尸网络，令人震惊的事件使物联网威胁变成了何时出现而不是是否出现的问题。 ******尽管网络和物理安全措施都在迅速进步，但由于在这种复杂的动态环境中交互的机器和人类的巨大性、不确定性和多样性，迄今为止的挑战已经超出了我们的解决方案。主要关注点之一来自物联网集成的智能基础设施，为我们的现代社会提供电力、连接、移动性和其他关键服务。无论是智能电网、智能家居、智能汽车还是智慧城市，网络物理物联网攻击的威胁迫在眉睫，网络物理安全方面科学和工程进步的需求也迫在眉睫。 ******为了满足这一迫切需求，该提案制定了一项多年计划，作为对物联网集成关键基础设施进行广泛安全调查的工具。拟议的计划建立在智能电网和智能城市安全研究的坚实基础上，目标是推进现有和新兴物联网基础设施中漏洞、威胁和防御的科学知识和工程解决方案。该技术计划由三个连贯的任务组成：（1）推进动态网络物理环境中网络物理安全的理论基础； (2) 开发用于物联网威胁分析、监控和缓解的新颖架构和算法； (3) 研究现实场景中特定于应用程序的威胁和解决方案。由于电力在所有物联网集成基础设施中的核心作用，智能电网将成为焦点，该计划将寻求如何使用机器智能来支持和反对这些基础设施的安全。******该计划的结果将在同行评审的高质量出版物中传播，同时将确定工业合作伙伴，以促进知识转移到实际应用。该计划的见解将有利于针对突出的物联网漏洞的预防、检测、缓解和恢复，并孵化整个研究界的未来项目。该计划符合 NSERC 的使命，将有助于知识获取、工业解决方案和劳动力发展，以确保所有加拿大人的基础设施和公共安全。

Machine-to-machine communication is entering a new era known as the Internet-of-Things (IoT), where physical devices are widely networked over the cyberspace to create data-centric intelligence in various application such as smart home assistants, automated factories, and self-driving vehicles. This ubiquitous cyber-physical integration, however, has also created sophisticated security issues from both cyber and physical layers. Alarming incidences, from financial industry breaches to IoT-targeted Stuxnet, BlackEnergy, and Mirai botnet, have made IoT threats into a question of when rather than if. ******Although both cyber and physical security measures have advanced rapidly, the challenges so far have outpaced our solutions due to the immensity, uncertainty, and variety of machines and humans interacting in this complex dynamic environment. One of the major concerns has come from IoT-integrated smart infrastructures providing electricity, connectivity, mobility, and other critical services to our modern society. Whether it is smart grids, smart homes, smart cars, or smart cities, the threats of cyber-physical IoT attacks are imminent, as is the need for science and engineering advancements in cyber-physical security. ******In response to this pressing need, the proposal lays out a multi-year program as a vehicle for a broad spectrum of security investigations on the IoT-integrated critical infrastructures. The proposed program is built on a solid foundation of security research on smart grids and smart cities' the goal is to advance both scientific knowledge and engineering solutions on vulnerabilities, threats, and defenses in existing and emerging IoT infrastructures. The technical plan is composed of three coherent tasks: (1) Advance the theoretical foundations for cyber-physical security in dynamic cyber-physical environments; (2) Develop novel architectures and algorithms for IoT threat profiling, monitoring, and mitigation; (3) Investigate application-specific threats and solutions in real-world scenarios. The smart grid will be the focus due to the centric role of electricity in all IoT-integrated infrastructures, and the program will seek how machine intelligence can be used for and against the security of these infrastructures.******Results of the program will be disseminated in peer-reviewed high-quality publications, while industrial partners will be identified to facilitate knowledge transfers to practical applications. Insights from the program will benefit the prevention, detection, mitigation, and restoration against prominent IoT exploits and incubate future projects of the research community at large. The program is in line with the missions of NSERC and will contribute to knowledge acquisition, industrial solutions, and workforce development to assure infrastructure and public security for all Canadians.