Cyber-Physical Security for Critical Internet-of-Things Infrastructures

关键物联网基础设施的网络物理安全

• 批准号: RGPIN-2018-06724
• 负责人: Yan, Jun
• 金额: $ 2.04万
• 依托单位: Concordia University
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2020
• 资助国家: 加拿大
• 起止时间: 2020-01-01 至 2021-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=714404
• 关键词: Cyber; Physical; Security; Critical; Internet

Machine-to-machine communication is entering a new era known as the Internet-of-Things (IoT), where physical devices are widely networked over the cyberspace to create data-centric intelligence in various application such as smart home assistants, automated factories, and self-driving vehicles. This ubiquitous cyber-physical integration, however, has also created sophisticated security issues from both cyber and physical layers. Alarming incidences, from financial industry breaches to IoT-targeted Stuxnet, BlackEnergy, and Mirai botnet, have made IoT threats into a question of when rather than if. Although both cyber and physical security measures have advanced rapidly, the challenges so far have outpaced our solutions due to the immensity, uncertainty, and variety of machines and humans interacting in this complex dynamic environment. One of the major concerns has come from IoT-integrated smart infrastructures providing electricity, connectivity, mobility, and other critical services to our modern society. Whether it is smart grids, smart homes, smart cars, or smart cities, the threats of cyber-physical IoT attacks are imminent, as is the need for science and engineering advancements in cyber-physical security. In response to this pressing need, the proposal lays out a multi-year program as a vehicle for a broad spectrum of security investigations on the IoT-integrated critical infrastructures. The proposed program is built on a solid foundation of security research on smart grids and smart cities' the goal is to advance both scientific knowledge and engineering solutions on vulnerabilities, threats, and defenses in existing and emerging IoT infrastructures. The technical plan is composed of three coherent tasks: (1) Advance the theoretical foundations for cyber-physical security in dynamic cyber-physical environments; (2) Develop novel architectures and algorithms for IoT threat profiling, monitoring, and mitigation; (3) Investigate application-specific threats and solutions in real-world scenarios. The smart grid will be the focus due to the centric role of electricity in all IoT-integrated infrastructures, and the program will seek how machine intelligence can be used for and against the security of these infrastructures. Results of the program will be disseminated in peer-reviewed high-quality publications, while industrial partners will be identified to facilitate knowledge transfers to practical applications. Insights from the program will benefit the prevention, detection, mitigation, and restoration against prominent IoT exploits and incubate future projects of the research community at large. The program is in line with the missions of NSERC and will contribute to knowledge acquisition, industrial solutions, and workforce development to assure infrastructure and public security for all Canadians.

机器对机器通信正在进入一个被称为物联网（IoT）的新时代，物理设备在网络空间上广泛联网，在智能家居助手、自动化工厂、自动驾驶汽车等各种应用中创建以数据为中心的智能。然而，这种无处不在的网络物理集成也从网络和物理层产生了复杂的安全问题。从金融行业的漏洞到以物联网为目标的Stuxnet、BlackEnergy和Mirai僵尸网络，令人担忧的事件已经使物联网威胁成为一个何时而不是是否存在的问题。