Cyber-Physical Security for Critical Internet-of-Things Infrastructures

关键物联网基础设施的网络物理安全

• 批准号: RGPIN-2018-06724
• 负责人: Yan, Jun
• 金额: $ 2.04万
• 依托单位: Concordia University
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2022
• 资助国家: 加拿大
• 起止时间: 2022-01-01 至 2023-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=750655
• 关键词: Cyber; Physical; Security; Critical; Internet

Machine-to-machine communication is entering a new era known as the Internet-of-Things (IoT), where physical devices are widely networked over the cyberspace to create data-centric intelligence in various application such as smart home assistants, automated factories, and self-driving vehicles. This ubiquitous cyber-physical integration, however, has also created sophisticated security issues from both cyber and physical layers. Alarming incidences, from financial industry breaches to IoT-targeted Stuxnet, BlackEnergy, and Mirai botnet, have made IoT threats into a question of when rather than if. Although both cyber and physical security measures have advanced rapidly, the challenges so far have outpaced our solutions due to the immensity, uncertainty, and variety of machines and humans interacting in this complex dynamic environment. One of the major concerns has come from IoT-integrated smart infrastructures providing electricity, connectivity, mobility, and other critical services to our modern society. Whether it is smart grids, smart homes, smart cars, or smart cities, the threats of cyber-physical IoT attacks are imminent, as is the need for science and engineering advancements in cyber-physical security. In response to this pressing need, the proposal lays out a multi-year program as a vehicle for a broad spectrum of security investigations on the IoT-integrated critical infrastructures. The proposed program is built on a solid foundation of security research on smart grids and smart cities' the goal is to advance both scientific knowledge and engineering solutions on vulnerabilities, threats, and defenses in existing and emerging IoT infrastructures. The technical plan is composed of three coherent tasks: (1) Advance the theoretical foundations for cyber-physical security in dynamic cyber-physical environments; (2) Develop novel architectures and algorithms for IoT threat profiling, monitoring, and mitigation; (3) Investigate application-specific threats and solutions in real-world scenarios. The smart grid will be the focus due to the centric role of electricity in all IoT-integrated infrastructures, and the program will seek how machine intelligence can be used for and against the security of these infrastructures.Results of the program will be disseminated in peer-reviewed high-quality publications, while industrial partners will be identified to facilitate knowledge transfers to practical applications. Insights from the program will benefit the prevention, detection, mitigation, and restoration against prominent IoT exploits and incubate future projects of the research community at large. The program is in line with the missions of NSERC and will contribute to knowledge acquisition, industrial solutions, and workforce development to assure infrastructure and public security for all Canadians.

机器对机器通信正在进入一个被称为物联网（IoT）的新时代，其中物理设备在网络空间上广泛联网，以在各种应用中创建以数据为中心的智能，例如智能家居助理，自动化工厂和自动驾驶车辆。然而，这种无处不在的网络物理集成也从网络和物理层产生了复杂的安全问题。从金融行业的违规行为到针对物联网的Stuxnet、BlackEnergy和米拉伊僵尸网络，令人震惊的事件使物联网威胁成为一个何时而不是是否存在的问题。尽管网络和物理安全措施都取得了迅速进展，但由于在这个复杂的动态环境中进行交互的机器和人类的复杂性、不确定性和多样性，到目前为止，挑战已经超过了我们的解决方案。其中一个主要问题来自物联网集成的智能基础设施，为我们的现代社会提供电力，连接，移动性和其他关键服务。无论是智能电网、智能家居、智能汽车还是智能城市，网络物理物联网攻击的威胁迫在眉睫，网络物理安全方面的科学和工程进步也迫在眉睫。为了应对这一迫切需求，该提案制定了一项多年计划，作为对物联网集成关键基础设施进行广泛安全调查的工具。该计划建立在智能电网和智能城市安全研究的坚实基础上，目标是推进现有和新兴物联网基础设施中漏洞，威胁和防御的科学知识和工程解决方案。该技术计划由三个连贯的任务组成：（1）在动态网络物理环境中推进网络物理安全的理论基础;（2）为物联网威胁分析，监控和缓解开发新的架构和算法;（3）调查现实世界场景中特定于应用程序的威胁和解决方案。由于电力在所有物联网集成基础设施中的核心作用，智能电网将成为重点，该计划将探索如何使用机器智能来支持和反对这些基础设施的安全性。该计划的结果将在同行评审的高质量出版物中传播，同时将确定行业合作伙伴，以促进知识转移到实际应用中。该计划的见解将有利于预防，检测，缓解和恢复突出的物联网漏洞，并孵化整个研究社区的未来项目。该计划符合NSERC的使命，将有助于知识获取，工业解决方案和劳动力发展，以确保所有加拿大人的基础设施和公共安全。