STTR Phase II: Security Monitoring and Intrusion Detection in SDR and CR Using Power Fingerprinting

该项目的更广泛影响/商业潜力是为易受攻击的无线网络设备和智能电网基础设施开发基于功率指纹（PFP）的创新网络安全解决方案。PFP可以防止资金充足的对手破坏这些关键系统，并在不被发现的情况下进行操作。PFP监视器可以直接在目标平台上评估完整性，包括那些没有商业解决方案可用的平台。PFP可以应用于各种嵌入式平台，并可以与传统的网络安全解决方案共存，在纵深防御方法中增加额外的保护层。这些特征使PFP能够检测复杂的攻击，例如最近的Stuxnet蠕虫。传统的外围网络安全方法，如杀毒软件和防火墙，正在针对目标平台进行调整，但成效有限。PFP解决了日益增长的关键基础设施的安全需求，例如通信和发电和配电，并直接监控其执行情况。PFP在商业和政府网络安全市场中具有双重应用，特别是对于资源受限和嵌入式平台。PFP有潜力通过保护国家而成为网络安全的基本参与者吗？促进经济基础和就业的进一步发展。这项小型企业技术转移研究（STTR）第二阶段项目旨在展示一种新型网络安全解决方案的商业原型，该解决方案基于一种称为功率指纹（PFP）的新方法，适用于无线网络基础设施和智能电网应用。PFP通过使用外部设备监控侧信道信息和应用信号处理技术来确定处理器的执行状态，为嵌入式和资源受限平台提供完整性评估和入侵检测。由于计算资源的限制，传统的网络安全解决方案在目标应用中的应用非常有限。此外，目前还没有商业解决方案能够直接监控网络设备（如无线路由器或智能电网中使用的控制系统）的执行和检测入侵。第二阶段工作的目标包括：1)演示用于无线网络和智能电网平台的PFP监视器商业原型，2)利用PFP工具增强目标平台上的自动表征，以及3)集成合适的机制以改善时序同步。在第二阶段结束时，将提供检测恶意入侵的原型PFP监视器的盲测演示，并作为商业化的发射台。

The broader impact/commercial potential of this project is the development of an innovative cyber security solution based on Power Fingerprinting (PFP) for vulnerable wireless networking equipment and smart grid infrastructure. PFP can prevent well-funded adversaries from compromising these critical systems and operate without being discovered. The PFP monitor can assess the integrity directly on the target platforms, including those for which there is no commercial solution available. PFP can be applied to a variety of embedded platform and can coexist with traditional cyber security solutions adding an extra layer of protection in a defense-in-depth approach. These characteristics make PFP capable of detecting sophisticated attacks, such as the recent Stuxnet worm. Traditional peripheral cyber security approaches, such as anti-virus and firewalls, are being adapted for the target platforms but with limited success. PFP addresses a growing need to secure critical infrastructure, such as communications and power generation and distribution, and directly monitor their execution. PFP has dual application in the commercial and government cybersecurity markets, particularly for resource-constrained and embedded platforms. PFP has the potential to become a fundamental player in cyber-security by protecting the nation?s infrastructure and promoting further development of the economic base and employment.This Small Business Technology Transfer Research (STTR) Phase 2 project aims to demonstrate a commercial prototype of a novel cyber security solution for wireless network infrastructure and Smart Grid applications based on a novel approach called Power Fingerprinting (PFP). PFP provides integrity assessment and intrusion detection for embedded and resource-constrained platforms by using an external device to monitor side-channel information and applying signal processing techniques to determine the execution status of a processor. Due to computational resource constraints, the application of traditional cyber security solutions to the proposed target applications is very limited. Furthermore, there are no commercial solutions available capable of directly monitoring the execution and detecting intrusions in networking equipment, such as wireless routers, or control systems used in the Smart Grid. The objectives of this Phase 2 effort include: 1) Demonstrate a PFP monitor commercial prototype for wireless network and Smart Grid platforms, 2) Leverage PFP tools to enhance automatic characterization on target platforms, and 3) Integrate suitable mechanisms to improve timing synchronization. At the end of Phase 2, a blind test demonstration of the prototype PFP monitor detecting malicious intrusions will be provided and serve as the launching pad into commercialization.