TC: Medium: Collaborative Research: Security Services in Open Telecommunications Networks

该奖项是根据2009年美国复苏和再投资法案（公法111-5）资助的。电信网络的性质正在迅速变化。 Android和Openmoko等商用智能手机框架邀请开发人员和最终用户构建应用程序，修改手机的行为，并以新颖的方式使用网络服务。 然而，在刺激令人难以置信的创新的同时，向开放系统的转变改变了网络设计所基于的基本性能和安全假设。这样的变化会带来从仅仅是令人烦恼的电话故障到灾难性的网络故障的漏洞。 目前的基础设施缺乏保护日益开放的网络所需的基本保护，目前还不清楚什么新的压力和威胁开放的系统和服务将introduce.This研究分析和实验研究防御基础设施解决开放的蜂窝操作系统和电信网络中的漏洞。 在这方面，我们正在三个协调的努力中探索这种防御的要求和设计; a）扩展和应用电信系统的正式策略模型，并为电话制造商、提供商、开发商和最终用户策略合规性验证提供工具，B）构建开源Android操作系统的安全意识分发，以及c）探索电信网络中过载控制的需要和设计，所述过载控制需要吸收移动的电话行为，业务模型，以及通信终端的多样性-这项研究通过支持研究生和本科生的研究，以共生方式支持组成机构的教育目标，并且是安全和网络课程的组成部分。

This award is funded under the American Recovery and Reinvestment Act of 2009 (Public Law 111-5).The nature of telecommunications networks is rapidly changing. Commodity smartmobile phone frameworks such as Android and Openmoko invite developers and end users to build applications, modify the behavior of the phone, and use network services in novel ways. However, while simultaneously spurring incredible innovation, the move to open systems alters the underlying performance and security assumptions upon which the network was designed. Such changes invite vulnerabilities ranging from merely vexing phone glitches to catastrophic network failures. The current infrastructure lacks the basic protections needed to protect an increasingly open network, and it is unclear what new stresses and threats open systems and services will introduce.This research analytically and experimentally investigates defensive infrastructure addressing vulnerabilities in open cellular operating systems and telecommunications networks. In this, we are exploring the requirements and design of such defenses in three coordinated efforts; a) extending and applying formal policy models for telecommunication systems, and provide tools for phone manufacturer, provider, developer, and end-user policy compliance verification, b) building a security-conscious distribution of the open-source Android operating system, and c) explore the needs and designs of overload controls in telecommunications networks needed to absorb changes in mobile phone behavior, traffic models, and the diversity of communication end- points.This research symbiotically supports educational goals at the constituent institutions by supporting graduate and undergraduate student research, and is integral to the security and network curricula.