Planning IUCRC University of Virginia: Center for Hardware and Embedded System Security and Trust (CHEST)

集成电路和嵌入式硬件设备对于国防、能源、医疗保健、银行、通信、运输和其他部门的大多数现代军事和工业系统至关重要。 这些设备比以往任何时候都更容易受到不受信任实体的恶意篡改，威胁范围广泛。 恶意功能可以在设计过程、制造或组装过程中添加到设备中，导致系统受损，通常无法检测到。 这项合作努力旨在通过开发新的方法和技术来增强这些设备及其各自系统的信任和安全性，从而进一步促进国防。研究目标是通过数据分析和系统工程方法的创新来了解嵌入式设备系统的风险和弹性。初步研究课题包括：为大型系统中关键设备的安全性分配资源，跟踪设备供应链的紧急情况和未来情况，以及系统对互联设备网络攻击的弹性。该研究确定了设备生命周期和供应链中影响风险和弹性的因素，开发了相关的性能指标和模型，并确定了关键场景和极端事件。该中心预计将影响工业和军事系统的设计和运营，重点关注与嵌入式设备相关的安全漏洞。具有嵌入式设备的系统吸收破坏性冲击并以最小的服务损失进行恢复的能力对于任务、资源、人员安全等至关重要。这些结果的传播提高了这些系统对各种紧急和未来条件的弹性，包括技术、环境、操作员行为、要求的演变、资源可用性、供应商等，硬件和嵌入式系统安全与信任产学研合作研究中心的合作小组由乔治梅森大学、东北大学、康涅狄格大学、德克萨斯大学达拉斯分校、弗吉尼亚大学和赖特州立大学组成。 合作者在https://www.vdl.afrl.af.mil/programs/PG_CHEST_IUCRC上建立了一个网站，提供会议材料、项目信息、出版物等。该网站无限期开放，或直到中心过渡到下一阶段。

Integrated circuit and embedded hardware devices are critical to most modern military and industrial systems for defense, energy, healthcare, banking, communication, transportation, and other sectors. These devices are more vulnerable than ever to malicious tampering by untrusted entities, with threats over a broad range of attack vectors. Malicious functionality can be added to the devices during the design process, fabrication, or assembly, leading to compromised systems, often without detection. This collaborative effort seeks to further the national defense by developing novel methodologies and technologies that enhance trust and security of these devices and their respective systems.The research goal is to understand the risk and resilience of systems with embedded devices through innovations to methodologies of data analytics and systems engineering. Initial research topics include: Resource allocation to the security of critical devices in large-scale systems, tracking emergent and future conditions of the device supply chain, and system resilience to attacks on networks of interconnected devices. The research identifies factors that influence risk and resilience in the lifecycles and supply chains of the devices, develops the associated performance metrics and models, and identifies the key scenarios and extreme events.The to-be-planned Center is expected to influence the design and operation of industrial and military systems, focusing on the security vulnerabilities associated with embedded devices. The ability of systems with embedded devices to absorb disruptive shocks and recover with minimal loss of service is critical to missions, resources, personnel safety, etc. The dissemination of these results improves the resilience of these systems to a variety of emergent and future conditions including technologies, environments, operator behaviors, evolutions of requirements, resource availability, suppliers, etc., and develops recommendations for industry, military, and government stakeholders.The collaborative group for the Industry-University Cooperative Research Center for Hardware and Embedded System Security and Trust is composed of George Mason University, Northeastern University, University of Connecticut, University of Texas at Dallas, University of Virginia, and Wright State University. The collaborators host a website at https://www.vdl.afrl.af.mil/programs/PG_CHEST_IUCRC with meeting materials, program information, publications, etc. The website is made available indefinitely or until the Center transitions to the next phase.