CT-ISG: Compiler-Enabled Adaptive Security Monitoring on Networked Embedded Systems

CT-ISG:基于编译器的网络嵌入式系统自适应安全监控李志远，Saurabh Bagchi，卢永祥普度大学计算机科学系，电气与电子工程系硬件技术在传感器和计算/通信设备的小型化方面取得了稳步进展，这推动了普适计算的趋势，普适计算是一种让计算设备直接与物理世界交互以监测自然环境的方法。提供建筑安全等。为了使普适计算成为现实，确保底层网络嵌入式系统的安全是至关重要的，因为这些系统可能会收集重要的环境数据，而时间敏感的决策依赖于这些数据。不幸的是，许多联网嵌入式系统，例如无线和有线传感器网络、RFID基础设施、无线网状网络，都有公开暴露给潜在对手的组件或链接，因此经常受到安全威胁，例如节点捕获、拒绝服务和入侵等。更糟糕的是，许多联网嵌入式系统比用于非嵌入式应用的计算机（如桌面机器和服务器）拥有更多的有限资源，如存储、带宽、计算能力和能源。在过去几十年里发展起来的复杂的计算机安全方案在网络嵌入式系统上通常是不可行的，至少在它们最初的形式下是不可行的。该项目的研究小组开发了一个多级监测方案，由一个新的编程接口支持，其中低成本的监测活动部署在系统的正常运行模式中，以检测可能（尽管不一定）由安全威胁引起的可疑症状。这一努力将为网络嵌入式系统带来更有效、更经济的安全监控和防御。

CT-ISG: Compiler-Enabled Adaptive Security Monitoring on NetworkedEmbedded SystemsZhiyuan Li, Saurabh Bagchi, Yung-Hsiang LuDepartment of Computer Science,Department of Electrical and Electronic EngineeringPurdue UniversityHardware technologies have made steady progressin miniaturization of sensors and computing/communication devices,which has driven a trend towards pervasive computing, which is a wayto let computing devices directly interact with the physical world to monitorthe natural environment, to provide building safety, and so on.In order to make pervasive computing a reality,it is critical to secure the underlying networked embedded systems,because these systems may collect importantenvironment data upon which time-sensitive decisions are dependent.Unfortunately, many of networked embedded systems, e.g. wireless andwired sensor networks, RFID infrastructure, wireless mesh networks,have components or links that are openly exposed to potentialadversaries and hence are under constant security threats such as nodecapture, denial of service, and intrusion, among others. To make thematters worse, many networked embedded systems have much moreconstrained resources such as storage, bandwidth, computing power andenergy than computers used in non-embedded applications, e.g. desktopmachines and servers. Sophisticated computer security schemesdeveloped over the last few decades are often infeasible on networkedembedded systems, at least not in their original forms.The research team of this projectdevelops a multi-grade monitoring scheme, supported by a newprogramming interface,in which low-cost monitoring activitiesare deployed in normal mode of operation of the systemsto detect suspicious symptoms which are possibly, althoughnot necessarily, caused by security threats. This effort will lead to much more effective, yet affordable, securitymonitoring and defense on networked embedded systems,