NeTS: Small: RUI: Towards Secure Home Networks

过去十年见证了住宅宽带连接、家庭网络、智能家居设备和物联网（IoT）系统的快速增长。然而，保护家庭网络构成了严峻的挑战，因为许多家庭用户几乎没有技术专长来管理、保护和排除他们的网络和连接设备的故障。一个保护和管理家庭网络的引人注目的解决方案需要一个自动化的、基于网络的解决方案，它总结了家庭网络中正在发生的事情，解释了为什么一些观察到的行为与正常或可疑的活动相关联，并建议如何防御安全威胁，并通过简单和可操作的步骤阻止意外行为。为了更好地理解保护家庭网络的研究问题和挑战，本项目在可编程家庭路由器上开发了一个内置的以行为为导向的流量分析系统，以收集、分析和理解家庭网络中所有可上网设备的传入、传出和内部流量。本研究项目将解决以下研究问题：1)如何在不影响应用性能的情况下，自动采集家庭网络的流量数据；Ii)如何通过输入、输出和内部流量捕获和理解家庭设备的行为模式；Iii)如何发现跨分布式家庭网络的全网活动；iv)如何利用家庭设备的行为模式来提高安全性和管理。揭示家庭设备行为模式的挑战包括家庭设备的异构性、不同家庭网络中流量行为的广泛多样性以及对用户隐私的高期望。这个项目将启动一个关于家庭网络的教育项目，让学生参与解决现实世界的问题。该项目为亚利桑那州立大学西校区的弱势群体学生带来了研究和发展机会，这是一所主要的本科院校，其中37%的应用计算机专业是弱势群体。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The last decade has witnessed the rapid growth of residential broadband connections, home networks, smart home devices, and Internet-of-Things (IoT) systems. However, securing home networks poses a serious challenge, because many home users have little technical expertise to manage, secure and troubleshoot their networks and connected devices. A compelling solution to secure and manage home networks requires an automated and network-based solution that summarizes what is going on in home networks, explains why some observed behaviors are associated with normal or suspicious activities, and suggests how to defend against security threats and stop unexpected behaviors with simple and actionable steps. To improve understanding of the research problems and challenges in securing home networks, this project develops a built-in behavior-oriented traffic profiling system on programmable home routers to collect, analyze and make sense of incoming, outgoing and internal traffic of all Internet-capable devices in home networks.This research project will address the following research problems: i) how to automatically collect traffic data from home networks with little impact on application performance; ii) how to capture and make sense of behavior patterns of home devices via incoming, outgoing, and internal traffic; iii) how to discover network-wide activities across distributed home networks; and iv) how to leverage behavior patterns of home devices to improve security and management.The challenges in uncovering behavior patterns of home devices includes the heterogeneity of home devices, the wide diversity of traffic behavior in different home networks, and the high expectation of user privacy. This project will initiate an educational program on home networks that will engage students in solving the real-world problems. The project brings research and development opportunities for students in underrepresented groups at ASU west campus, a predominantly undergraduate institution where 37% of the applied computing majors are underrepresented minorities.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.