REU Site: Trustable Embedded Systems Security Research

该项目建议继续设立REU网站，为本科生提供参与康涅狄格大学计算机系统安全研究的机会。计算机系统已经融入我们的日常生活和工作，以及我们国家基础设施的每一部分。因此，他们显然是那些为了财政、政治或其他原因而企图腐败系统的人的目标。虽然通用计算和通信环境下的安全性已经得到了广泛的研究，但嵌入式系统安全性的研究最近才得到重视。嵌入式设备数量庞大，在日常生活和工作的各个方面都得到了广泛的应用，这使得其安全漏洞比传统的软件漏洞更加危险和昂贵。嵌入式系统的资源限制（处理能力、内存、电池）和针对嵌入式系统的攻击技术（包括软件、硬件、侧信道攻击）范围的不断增加对嵌入式系统的安全性提出了许多挑战。一个主要的国家需求是研究和研究人员谁可以解决嵌入式系统的安全性。将嵌入式系统研究介绍给处于学术生涯早期阶段的本科生，将激发他们的兴趣，培养下一代计算机系统安全研究人员。这个REU项目的目标是让本科生掌握计算机系统安全研究的技能，重点是嵌入式系统安全研究。该项目为本科生提供为期10周的暑期强化课程，特别是那些代表性不足的群体和那些可能没有机会参与研究活动的学生。学生将参加一系列由pi举办的培训研讨会，学习嵌入式系统安全研究的基础知识，以及研究生院所需的一般技能，如技术写作和演讲。从第一天到为期10周的REU项目结束，每个学生将与项目工作人员一起从广泛的主题中选择一个研究项目，包括计算机系统和硬件审计，可证明的安全嵌入式系统，安全处理器架构，安全移动计算，安全投票系统和芯片盗版弹性。此外，学生将有机会参加与电脑系统保安有关的专业会议，以扩阔他们的视野，并见证在世界各地进行的研究项目。

This project proposes to continue an REU Site offering undergraduate students the opportunity to participate in computer systems security research at the University of Connecticut. Computer systems have been integrated into our daily life and work, as well as every part of our national infrastructure. Thus, they are an obvious target for those who intend to corrupt the systems for financial, political or other reasons. While security in the context of general-purpose computing and communication has been studied extensively, research on embedded systems security has only gained attention recently. The vast number of embedded devices and their wide-spread usage in all aspects of or daily life and work make their security vulnerabilities much more dangerous and costly than traditional software vulnerabilities. The resource constraints (in processing capabilities, memory, battery) of embedded systems and the ever increasing range of attack techniques targeting embedded systems (including software, hardware, side-channel attacks) pose many challenges to embedded systems security. A primary national need is research and researchers who can address the security of embedded systems. Introducing embedded systems research to undergraduate students in the early stages of their academic careers will spark their interests, creating next-generation computer systems security researchers. The goal of this REU project is to equip undergraduate students with skills in computer systems security research, with a focus on embedded systems security research. The project offers an intensive 10-week summer program to undergraduate students, particularly those in underrepresented groups and those that may not have the opportunities to participate in research activities. Students will attend a series of training seminars conducted by the PIs to learn the basics of embedded systems security research as well as general skills required in graduate school such as technical writing and presentations. From day one until the end of the 10-week REU program, each student will work with the project staff on one research project selected from a wide spectrum of topics, including computer systems and hardware auditing, provable secure embedded systems, secure processor architectures, secure mobile computing, secure voting systems and chip piracy resilience. In addition, students will have the opportunity to participate in a professional conference related to computer systems security to broaden their vision and witness research projects conducted worldwide.