Cryptographic Methods for Securing Cyber-Physical Systems

信息物理系统（CPS）是由物理和计算组件组成的智能协同工程交互网络。CPS的范围从小型（物联网）设备（如植入式医疗设备）到大型系统（如智能电网、工业控制系统、智能建筑和城市）。虽然与松散耦合系统相比，CPS提供了更丰富的功能、效率和可靠性，但它们也存在固有的安全性和隐私漏洞。确保当前和新兴CPS的安全性必须考虑到这种环境中存在的独特挑战，例如CPS与物理世界交互的不可逆性质、严格的实时可用性要求、在循环中缺少人类、部署规模以及CPS组件的长预期寿命。为了解决CPS中的安全和隐私问题，在未来几年，密码学将越来越成为CPS不可或缺的一部分；为了提供关键的安全特性，所有相互作用的网络计算机和设备都需要实现加密层。另一方面，传统的加密机制是不够的，从根本上讲，需要新的想法。

Cyber-Physical Systems (CPS) are smart co-engineered interacting networks of physical and computational components. CPS range from small (IoT) devices such as implantable medical devices to large scale systems such as smart grids, industrial control systems, and smart buildings and cities. While CPS provide richer functionality, efficiency, and reliability compared to loosely coupled systems, they also create inherent security and privacy vulnerabilities. Ensuring the security of current and emerging CPS must take into consideration the unique challenges present in this environment such as the non-reversible nature of the interactions of CPS with the physical world, strict real-time availability requirements, absence of the human in the loop, the scale of deployment, and the long projected lifetimes of CPS components. In order to tackle the security and privacy issues in CPS, in the coming years, cryptography will increasingly become more integral to CPS; all interacting networked computers and devices need to have cryptographic layers implemented in order to provide key security features. On the other hand, traditional cryptographic mechanisms are inadequate, and fundamentally new ideas are needed. This research program aims to investigate innovative cryptographic techniques that can be used to enhance the security of CPS for decades to come. Our long term objective is to develop provably-secure cryptographic algorithms and security protocols for CPS taking into consideration the unique challenges present in CPS environments. The developed algorithms and protocols should be ready for analysis, standardization, and deployment by security practitioners and engineers in relevant CPS/IoT industries. In the short term, we aim to (i) Develop key management and multicast authentication schemes suitable for CPS, (ii) Develop lightweight and post-quantum algorithms suitable for CPS deployment, (iii) Investigate multidisciplinary approaches to improve CPS resiliency to cyber attack. The developed techniques should allow, not only to defend and detect cyber attacks, but also to remediate and recover from these attacks and ensure the continuous operation of the underlying CPS, and (iv) Provide open source hardware/software implementations for some of the security mechanisms developed throughout this project to prototype and build secure CPS and IoT applications. The research outcomes of our proposed program will enhance the CPS/IoT security community state-of-the-art and knowledge. Success in developing an efficient and provably secure cryptographic schemes would be significant in supporting a large number of valuable CPS applications and industries. Furthermore, the training provided to our graduate students and researchers throughout this program will also satisfy the urgent need for gender-balanced and diverse pool of highly qualified Canadian experts in CPS/IoT security, which has never been as vital as it is nowadays.