Cryptographic Methods for Securing Cyber-Physical Systems

网络物理系统 (CPS) 是物理和计算组件的智能协同设计交互网络。 CPS 的范围从植入式医疗设备等小型 (IoT) 设备到智能电网、工业控制系统以及智能建筑和城市等大型系统。虽然与松散耦合系统相比，CPS 提供了更丰富的功能、效率和可靠性，但它们也造成了固有的安全和隐私漏洞。确保当前和新兴 CPS 的安全性必须考虑到该环境中存在的独特挑战，例如 CPS 与物理世界交互的不可逆性、严格的实时可用性要求、环路中无人参与、部署规模以及 CPS 组件的长预计使用寿命。为了解决 CPS 中的安全和隐私问题，未来几年，密码学将越来越成为 CPS 不可或缺的一部分；所有交互的网络计算机和设备都需要实施加密层，以提供关键的安全功能。另一方面，传统的密码机制是不够的，需要全新的想法。 该研究计划旨在研究可用于增强未来几十年 CPS 安全性的创新加密技术。我们的长期目标是考虑到 CPS 环境中存在的独特挑战，为 CPS 开发可证明安全的加密算法和安全协议。开发的算法和协议应可供相关 CPS/IoT 行业的安全从业人员和工程师进行分析、标准化和部署。短期内，我们的目标是（i）开发适合 CPS 的密钥管理和多播身份验证方案，（ii）开发适合 CPS 部署的轻量级和后量子算法，（iii）研究多学科方法以提高 CPS 对网络攻击的弹性。所开发的技术不仅应该能够防御和检测网络攻击，还应该能够修复和从这些攻击中恢复，并确保底层 CPS 的持续运行，以及 (iv) 为整个项目中开发的一些安全机制提供开源硬件/软件实现，以原型化和构建安全的 CPS 和物联网应用程序。 我们拟议计划的研究成果将增强 CPS/IoT 安全社区的最新技术和知识。成功开发高效且可证明安全的加密方案对于支持大量有价值的 CPS 应用程序和行业具有重要意义。 此外，在整个项目中为我们的研究生和研究人员提供的培训也将满足对 CPS/物联网安全方面性别平衡和多样化的高素质加拿大专家库的迫切需求，这从未像现在这样重要。

Cyber-Physical Systems (CPS) are smart co-engineered interacting networks of physical and computational components. CPS range from small (IoT) devices such as implantable medical devices to large scale systems such as smart grids, industrial control systems, and smart buildings and cities. While CPS provide richer functionality, efficiency, and reliability compared to loosely coupled systems, they also create inherent security and privacy vulnerabilities. Ensuring the security of current and emerging CPS must take into consideration the unique challenges present in this environment such as the non-reversible nature of the interactions of CPS with the physical world, strict real-time availability requirements, absence of the human in the loop, the scale of deployment, and the long projected lifetimes of CPS components. In order to tackle the security and privacy issues in CPS, in the coming years, cryptography will increasingly become more integral to CPS; all interacting networked computers and devices need to have cryptographic layers implemented in order to provide key security features. On the other hand, traditional cryptographic mechanisms are inadequate, and fundamentally new ideas are needed. This research program aims to investigate innovative cryptographic techniques that can be used to enhance the security of CPS for decades to come. Our long term objective is to develop provably-secure cryptographic algorithms and security protocols for CPS taking into consideration the unique challenges present in CPS environments. The developed algorithms and protocols should be ready for analysis, standardization, and deployment by security practitioners and engineers in relevant CPS/IoT industries. In the short term, we aim to (i) Develop key management and multicast authentication schemes suitable for CPS, (ii) Develop lightweight and post-quantum algorithms suitable for CPS deployment, (iii) Investigate multidisciplinary approaches to improve CPS resiliency to cyber attack. The developed techniques should allow, not only to defend and detect cyber attacks, but also to remediate and recover from these attacks and ensure the continuous operation of the underlying CPS, and (iv) Provide open source hardware/software implementations for some of the security mechanisms developed throughout this project to prototype and build secure CPS and IoT applications. The research outcomes of our proposed program will enhance the CPS/IoT security community state-of-the-art and knowledge. Success in developing an efficient and provably secure cryptographic schemes would be significant in supporting a large number of valuable CPS applications and industries. Furthermore, the training provided to our graduate students and researchers throughout this program will also satisfy the urgent need for gender-balanced and diverse pool of highly qualified Canadian experts in CPS/IoT security, which has never been as vital as it is nowadays.