STTR Phase I: Security for Wireless Devices: Security Monitoring and Intrusion Detection in SDR and CR Using Power Fingerprinting

这项小型企业技术转移研究（STTR）第一阶段项目将确定应用一种称为功率指纹（PFP）的技术的技术和商业可行性，以监控软件定义和认知无线电（SDR和CR）系统的执行完整性，并检测恶意入侵。SDR和CR技术是增强无线电频谱接入的基础，但它们本身就容易受到网络攻击，从而增加了干扰风险，并使监管合规复杂化。PFP使用侧信道信息来评估关键软件模块的完整性，如果这些模块被破坏，可能会影响光谱发射和信息安全。第一阶段的研究目标包括：1)论证利用PFP表征关键SDR/CR模块的可行性；2)定义PFP系统架构，增强SDR/CR安全性；3)检测对频谱接入关键部分的攻击；4)将PFP监测纳入SDR/CR监管流程。实现这些目标所需的研究将使用开源工具和库来实现动态频谱访问方法。在第一阶段结束时，将提供PFP检测执行违规的盲测演示，并作为将此研究继续到第二阶段项目以提供商业原型的基线。该项目的更广泛影响/商业潜力包括开发一种创新机制，以保护SDR和CR系统及其增强的频谱接入能力，减轻恶意攻击造成的干扰风险。该第一阶段项目将引入网络安全的新视角，将其视为信号检测和分类问题，并引入有形的完整性和信任量化指标。SDR和CR是提高电磁频谱利用效率的关键。因此，有效保护这些设备至关重要，因为它们将通信敏感信息并支持关键基础设施，使其成为网络攻击的主要目标。在商业上，这项研究在商业和国防无线市场有双重应用，特别是对于资源受限和嵌入式平台，包括智能手机和战术通信设备。拟议的方法有可能通过保护国家而成为网络安全的基本参与者。促进经济基础和就业的进一步发展。此外，通过允许可信赖的SDR和CR技术部署，这项研究将有助于释放无线电频谱增强访问带来的重大商业机会。

This Small Business Technology Transfer Research (STTR) Phase I project will determine the technical and commercial feasibility of applying a technique called Power Fingerprinting (PFP) to monitor the execution integrity of software-defined and cognitive radio (SDR and CR) systems and detect malicious intrusions. SDR and CR technologies are the foundation for enhanced access to the radio spectrum, but they are inherently vulnerable to cyber attacks, which increases interference risks and complicates regulatory compliance. PFP uses side-channel information to assess the integrity of critical software modules that, if disrupted, can impact spectral emission and information security. The research objectives for Phase I include: 1) demonstrate the feasibility of characterizing critical SDR/CR modules using PFP; 2) define PFP system architecture to enhance SDR/CR security; 3) detect attacks to sections critical for spectrum access; and 4) integrate PFP monitoring into SDR/CR regulatory process. The research necessary to achieve these objectives will be performed using open-source tools and libraries to implement dynamic spectrum access approaches. At the end of Phase I, a blind-test demonstration of PFP detecting execution violations will be provided and serve as the baseline to continue this research into a Phase II project to provide a commercial prototype.The broader impact/commercial potential of this project includes the development of an innovative mechanism to protect SDR and CR systems and their enhanced spectrum access capabilities, mitigating interference risks due to malicious attacks. This Phase I project will introduce a new perspective to cyber security by treating it as a signal detection and classification problem and introducing tangible quantitative metrics for integrity and trust. SDR and CR are crucial to use the electromagnetic spectrum more efficiently. Therefore, it is of the utmost importance to effectively secure these devices, as they will be communicating sensitive information and supporting critical infrastructure, making them prime targets for cyber attacks. Commercially, this research has dual application in the commercial and defense wireless markets, particularly for resource-constrained and embedded platforms, including smart phones and tactical communication devices. The proposed approach has the potential to become a fundamental player in cyber-security by protecting the nation?s infrastructure and promoting further development of the economic base and employment. Furthermore, by allowing trustworthy deployment of SDR and CR technology, this research will help unleash the significant commercial opportunities that come with enhanced access to the radio spectrum.