Cryptographic Methods for Securing Cyber-Physical Systems

确保网络物理系统安全的密码方法

• 批准号: RGPIN-2020-05529
• 负责人: Youssef, Amr
• 金额: $ 3.35万
• 依托单位: Concordia University
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2021
• 资助国家: 加拿大
• 起止时间: 2021-01-01 至 2022-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=740638
• 关键词: Cryptographic; Methods; Securing; Cyber; Physical

Cyber-Physical Systems (CPS) are smart co-engineered interacting networks of physical and computational components. CPS range from small (IoT) devices such as implantable medical devices to large scale systems such as smart grids, industrial control systems, and smart buildings and cities. While CPS provide richer functionality, efficiency, and reliability compared to loosely coupled systems, they also create inherent security and privacy vulnerabilities. Ensuring the security of current and emerging CPS must take into consideration the unique challenges present in this environment such as the non-reversible nature of the interactions of CPS with the physical world, strict real-time availability requirements, absence of the human in the loop, the scale of deployment, and the long projected lifetimes of CPS components. In order to tackle the security and privacy issues in CPS, in the coming years, cryptography will increasingly become more integral to CPS; all interacting networked computers and devices need to have cryptographic layers implemented in order to provide key security features. On the other hand, traditional cryptographic mechanisms are inadequate, and fundamentally new ideas are needed. This research program aims to investigate innovative cryptographic techniques that can be used to enhance the security of CPS for decades to come. Our long term objective is to develop provably-secure cryptographic algorithms and security protocols for CPS taking into consideration the unique challenges present in CPS environments. The developed algorithms and protocols should be ready for analysis, standardization, and deployment by security practitioners and engineers in relevant CPS/IoT industries. In the short term, we aim to (i) Develop key management and multicast authentication schemes suitable for CPS, (ii) Develop lightweight and post-quantum algorithms suitable for CPS deployment, (iii) Investigate multidisciplinary approaches to improve CPS resiliency to cyber attack. The developed techniques should allow, not only to defend and detect cyber attacks, but also to remediate and recover from these attacks and ensure the continuous operation of the underlying CPS, and (iv) Provide open source hardware/software implementations for some of the security mechanisms developed throughout this project to prototype and build secure CPS and IoT applications. The research outcomes of our proposed program will enhance the CPS/IoT security community state-of-the-art and knowledge. Success in developing an efficient and provably secure cryptographic schemes would be significant in supporting a large number of valuable CPS applications and industries. Furthermore, the training provided to our graduate students and researchers throughout this program will also satisfy the urgent need for gender-balanced and diverse pool of highly qualified Canadian experts in CPS/IoT security, which has never been as vital as it is nowadays.

网络物理系统（CPS）是物理和计算组件的智能协同设计交互网络。CPS的范围从小型（IoT）设备（如植入式医疗设备）到大型系统（如智能电网、工业控制系统以及智能建筑和城市）。与松散耦合系统相比，CPS提供了更丰富的功能、效率和可靠性，但它们也带来了固有的安全和隐私漏洞。确保当前和新兴CPS的安全性必须考虑到这种环境中存在的独特挑战，例如CPS与物理世界交互的不可逆性，严格的实时可用性要求，循环中没有人，部署规模以及CPS组件的预期寿命长。为了解决CPS中的安全和隐私问题，在未来几年，密码学将越来越成为CPS的组成部分;所有交互的联网计算机和设备都需要实现密码层，以提供关键的安全功能。另一方面，传统的加密机制是不够的，需要从根本上新的想法。 本研究计划旨在研究创新的密码技术，可用于提高CPS的安全性在未来几十年。我们的长期目标是开发可证明安全的密码算法和安全协议CPS考虑到目前在CPS环境中的独特挑战。所开发的算法和协议应准备好供相关CPS/IoT行业的安全从业人员和工程师进行分析、标准化和部署。在短期内，我们的目标是（i）开发适合CPS的密钥管理和多播认证方案，（ii）开发适合CPS部署的轻量级和后量子算法，（iii）研究多学科方法来提高CPS对网络攻击的弹性。所开发的技术不仅应允许防御和检测网络攻击，而且还应允许从这些攻击中进行补救和恢复，并确保底层CPS的持续运行，以及（iv）为整个项目中开发的一些安全机制提供开源硬件/软件实现，以原型化和构建安全的CPS和物联网应用程序。我们提出的计划的研究成果将提高CPS/物联网安全社区的最先进水平和知识。成功地开发一个有效的和可证明安全的密码方案将是重要的，在支持大量有价值的CPS应用和行业。此外，在整个计划中为我们的研究生和研究人员提供的培训也将满足对CPS/物联网安全方面高素质加拿大专家的性别平衡和多样化的迫切需求，这从未像现在这样重要。