SDCI: Integrated Simulation and Emulation Platform for Security Experimentation

网络物理系统（CPS）的可靠性是一个重要的问题，因为这样的系统通常在关键环境中使用。目前，许多CPS组件的构建没有充分形式化和分析属性和保证。系统设计阶段的这种不足可能导致操作中的灾难性后果，因为它们与开放网络相连，并且越来越容易受到安全攻击。对于在现实环境中使用仿真和仿真的快速增长的应用程序，迫切需要对网络和物理系统进行整体评估，这将对CPS的防御能力带来现实的攻击。为了满足这一需求，本项目建议构建iSEE -集成仿真和仿真平台，用于安全实验，作为软件支持研究基础设施，用于网络安全研究和开发。iSEE允许对从完全模拟到完全实现的系统的CPS进行并发建模、实验和评估。iSEE有两个主要组成部分：1)用于系统规范和实验配置的建模环境；2)支持实验执行的运行时环境。iSEE采用模型集成计算（MIC）方法，该方法显式地在整个实验环境中使用模型，并在特定领域的模型级别上将它们集成。虽然iSEE将主要用于CPS领域，但用于系统的系统建模和安全攻击建模的元模型将在基础层面上开发，以便它们可以推广到具有类似安全评估需求的许多领域。iSEE将为CPS研究人员提供一个工具来评估CPS的安全属性。它将为早期CPS设计中的关键属性构建安全性奠定基础，并促进计算机科学与其他工程领域之间的跨学科研究和教育。

Trustworthiness of cyberphysical systems (CPS) is an essential concern since such systems are routinely employed in critical settings. Currently many components of CPS are built without sufficiently formalized and analyzed properties and guarantees. Such inadequacies in the system design phase can lead to catastrophic consequences in operations, as they are interconnected to open networks and become increasingly exposed to security attacks. There is a pressing need to evaluate both cyber- and physical systems together and holistically for a rapidly growing number of applications using simulation and emulation in a realistic environment, which brings realistic attacks against the defensive capabilities of CPS. To address this need, this project proposes to build iSEE - integrated Simulation and Emulation platform for security Experimentation, as a software supporting research infrastructure used for cyber security research and development. iSEE allows for the concurrent modeling, experimentation and evaluation of CPS that range from a fully simulated to a fully implemented system. iSEE has two major components: 1) modeling environment for system specification and experiment configuration and 2) run-time environment that supports experiment execution. iSEE employs the Model-Integrated-Computing (MIC) approach, which explicitly uses models throughout the experiment environments and integrates them at the domain-specific model level. Though iSEE will be primarily used in the CPS domain, the meta-models for system-of-systems modeling and security attack modeling will be developed at a fundamental level, such that they will be generalizable to many domains with similar security assessment needs. iSEE will provide CPS researchers a tool to evaluate CPS with respect to their security properties. It will set the stage for building security as a key property in early CPS design and promote interdisciplinary research and education between computer science and other engineering domains.