CAREER: Securing Broadband Cellular Data Networks

蜂窝网络是我们重要的信息基础设施的一部分，然而，即将到来的宽带蜂窝数据网络和移动设备具有独特的脆弱性，很少引起研究的关注. PI提出了一个五年计划，以了解固有的漏洞，并开发技术来提高蜂窝数据网络和移动设备的安全性。 特别是，PI将集中在蜂窝数据系统中的以下易损坏性：（1）移动的设备中的电池电量不足;（2）昂贵的无线带宽;（3）良性和恶意移动的设备之间共享的无线资源不足。 为了解决这些漏洞，PI提出了一个全面的解决方案，包括三个组成部分：（1）在移动的设备上，设计和实施关于功耗的访问控制策略;（2）在移动的交换中心（MSC），设计和部署可由单个移动的设备配置但可由MSC验证的防火墙;（3）在基站端，检测恶意的移动的设备滥用共享资源，对提高宽带蜂窝数据网络的安全性有着直接的、可见的影响。 发现的漏洞和提出的防御机制将有助于蜂窝提供商在对手发动毁灭性攻击之前主动保护其网络。 本项目的经验将有助于指导未来蜂窝数据网络的安全设计。 本项目开发的新颖的分析、模拟和评估技术将对安全、网络和编程语言方面的教师和研究人员有价值。拟议的教育使命是通过课堂教学、解决现实问题和研究建议来培养学生成为有能力的安全研究人员或实践者。

Cellular networks are part of our critical information infrastructure.However, the upcoming broadband cellular data networks and mobiledevices have unique vulnerabilities that have attracted littleresearch attention. The PI proposes a five-year plan forunderstanding the inherent vulnerabilities and developing technologiesfor improving the security of cellular data networks and mobiledevices. Particularly, the PI will focus on the following uniquevulnerabilities in cellular data systems: (1) Scarce battery power inmobile devices; (2) Expensive wireless bandwidth; (3) Scarce wirelessresources shared among benign and malicious mobile devices. Toaddress these vulnerabilities, the PI proposes a comprehensivesolution consisting of three components: (1) On mobile devices,designing and enforcing access control policies on power consumption;(2) At mobile switching centers (MSC), designing and deployingfirewalls configurable by individual mobile devices but verifiable bythe MSC; (3) At base stations, detecting malicious mobile devices thatabuse shared resources.This project will have direct, visible impact on improving thesecurity of broadband cellular data networks. The discoveredvulnerabilities and proposed defense mechanisms will help cellularproviders secure their networks proactively before the adversariesdeliver devastating attacks. Experiences gained in this project willhelp guide the security design of future cellular data networks. Thenovel analysis, simulation, and evaluation techniques developed inthis project will be valuable to teachers and researchers inin security, networking, and programming languages.The proposed education mission is to train students to become capablesecurity researchers or practitioners through classroom teaching, real-life problem solving, and research advising.