NeTS: JUNO: Cognitive Security: A New Approach to Securing Future Large Scale and Distributed Mobile Applications

身份验证是保护网络应用程序安全的第一步。传统身份验证依赖于基于某些预先配置的机密验证用户身份的加密算法。在一个拥有“万亿”移动对象(“无所不在的计算”)的世界里，严格的密钥管理技术变得困难，预先配置的秘密的可追踪性受到威胁，基于密码的认证方案变得无效。本项目将研究另一种方法，称为认知安全，以解决这一紧迫的问题。认知安全旨在用移动设备和用户等网络实体固有的唯一、不可伪造和强大的凭据来补充基于密码的解决方案。例如，位置声明可以通过由在所述时间出现在所述位置的环境无线电信号构建的位置“指纹”来验证。验证者可以通过从用户的在线社交网络学习的知识来验证用户的身份。这些凭证是用户自然知道的移动设备的物理属性或知识，不需要预先配置或记住。将开发机制，以便可以通过正常的网络操作收集或学习这些凭据，并用于安全地验证设备或用户的身份或声明。这是美国和日本之间的一个国际合作项目。该项目将涉及多个信息技术领域，包括安全、无线通信和网络以及机器学习。认知安全是一种很有前途的移动网络安全新方法，在这种情况下，设备或存储在设备中的秘密的安全无法得到保证。

Authentication is the first step in securing a networked application. Traditional authentication relies on cryptographic algorithms that verify users identify based on certain pre-configured secrets. In a world with "trillions" of mobile objects ("computation in everything") rigorous key management techniques are difficult, the traceability of pre-configured secrets is compromised, and crypto-based authentication schemes become ineffective.This project will investigate an alternative approach, referred to as cognitive security, to address this compelling problem. Cognitive security aims to supplement the crypto-based solutions with unique, unforgeable, and robust credentials that are inherent to the network entities such as mobile devices and users. For example, a location claim can be verified by a location "fingerprint" constructed from the ambient radio signals presented at the said location at the said time. A user's identity can be verified by knowledge the verifier learned from the user's online social networks. These credentials are physical properties of the mobile devices or knowledge naturally known to the users, which do not have to be pre-configured or remembered. Mechanisms will be developed so that these credentials can be collected or learnt through the normal network operations and be used to securely verify a device or a user's identity or claims. This is an international collaborative project, between US and Japan. The project will involve multiple areas of information technology, including security, wireless communications and networking, and machine learning. Cognitive security is a promising new approach to mobile network security where the security of the device or secrets stored in the device cannot be guaranteed.