Cyber-Physical Security for Critical Internet-of-Things Infrastructures

点击翻译按钮获取中文摘要

Machine-to-machine communication is entering a new era known as the Internet-of-Things (IoT), where physical devices are widely networked over the cyberspace to create data-centric intelligence in various application such as smart home assistants, automated factories, and self-driving vehicles. This ubiquitous cyber-physical integration, however, has also created sophisticated security issues from both cyber and physical layers. Alarming incidences, from financial industry breaches to IoT-targeted Stuxnet, BlackEnergy, and Mirai botnet, have made IoT threats into a question of when rather than if. Although both cyber and physical security measures have advanced rapidly, the challenges so far have outpaced our solutions due to the immensity, uncertainty, and variety of machines and humans interacting in this complex dynamic environment. One of the major concerns has come from IoT-integrated smart infrastructures providing electricity, connectivity, mobility, and other critical services to our modern society. Whether it is smart grids, smart homes, smart cars, or smart cities, the threats of cyber-physical IoT attacks are imminent, as is the need for science and engineering advancements in cyber-physical security. In response to this pressing need, the proposal lays out a multi-year program as a vehicle for a broad spectrum of security investigations on the IoT-integrated critical infrastructures. The proposed program is built on a solid foundation of security research on smart grids and smart cities' the goal is to advance both scientific knowledge and engineering solutions on vulnerabilities, threats, and defenses in existing and emerging IoT infrastructures. The technical plan is composed of three coherent tasks: (1) Advance the theoretical foundations for cyber-physical security in dynamic cyber-physical environments; (2) Develop novel architectures and algorithms for IoT threat profiling, monitoring, and mitigation; (3) Investigate application-specific threats and solutions in real-world scenarios. The smart grid will be the focus due to the centric role of electricity in all IoT-integrated infrastructures, and the program will seek how machine intelligence can be used for and against the security of these infrastructures. Results of the program will be disseminated in peer-reviewed high-quality publications, while industrial partners will be identified to facilitate knowledge transfers to practical applications. Insights from the program will benefit the prevention, detection, mitigation, and restoration against prominent IoT exploits and incubate future projects of the research community at large. The program is in line with the missions of NSERC and will contribute to knowledge acquisition, industrial solutions, and workforce development to assure infrastructure and public security for all Canadians.