FCTaaS: Federated Cybersecurity Testbed as a Service

随着智能基础设施、智能建筑、智能电网、智能工业和制造业以及智能城市和政府的出现，如果它们彼此孤立，就会产生更多的新漏洞。复杂的网络攻击可以利用这些漏洞来破坏甚至完全禁用这些基础设施的运行，从而严重影响我们的国家安全以及我们生活和经济的各个方面。为了克服智能基础设施带来的网络安全挑战，研究人员和教育工作者需要更好地了解这些基础设施之间的相互依赖关系，它们对网络安全问题的影响以及如何开发有效的防御和保护性保护解决方案。该项目的主要目标是探索创新算法，使研究人员和学生能够访问多个异构测试平台的资源。这种方法有可能提供新的能力来进行重要的研究，如：1。如何建模和预测复杂，大型，异构和动态的网络安全和网络物理测试平台联盟之间的操作和交互; 2。如何在自然、事故或恶意行为可能导致的正常和异常情况下保护智能基础设施资源和服务及其交互; 3.如何开发一个创新的教学和培训实验，以提供实践经验，如何发现基础设施内现有的或新创建的漏洞，或与其他基础设施的交互引起的，检测和保护其操作免受恶意攻击。采用面向服务的体系结构（SOA）来开发联邦智能基础设施测试床，以使研究人员和教育工作者能够发布/发现他们的研究和教育计划所需的测试床。最初，底特律大学Mercy提供的福特面包板智能汽车测试平台和UA测试平台（包括物联网测试平台、目前托管在亚马逊公共云上的虚拟网络安全测试平台和无线安全测试平台）用于联合、实验和评估。 NSF云计算和自主计算中心开发的开放通信标准和安全工具用于维护联合安全测试平台的安全性和隐私性。这些服务允许异构的测试平台以语法和语义的方式传递数据，从而能够准确地解释接收到的数据的语义以及这些测试平台之间的依赖关系。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

With the advent of smart infrastructures, smart buildings, smart grids, smart industry and manufacturing, and smart cities and governments have created more new vulnerabilities than would exist if they were isolated from one another. Sophisticated cyberattacks can exploit these vulnerabilities to disrupt or even completely disable the operations of these infrastructures and consequently can severely impact our national security and all aspects of our life and economy. To overcome the cybersecurity challenges introduced by smart infrastructures, researchers and educators need to better understand the interdependencies among these infrastructures, their implications on cybersecurity issues and how to develop effective defense and protective protection solutions.The main goal of this project is to explore innovative algorithms to allow the investigators and students to access resources across multiple and heterogeneous testbeds. This approach has the potential to provide new capabilities to conduct important research such as:1. How to model, and predict operations and interactions among complex, large, heterogeneous, and dynamic federation of cybersecurity and cyberphysical testbeds; 2. How to secure and protect smart infrastructure resources and services and their interactions under normal and abnormal situations that may be caused by nature, accident, or malicious actions; and 3. How to develop an innovative teaching and training experiments to provide hands-on experiences on how to discover existing or newly created vulnerabilities within an infrastructure or caused by the interactions with other infrastructures, detect and protect their operations against malicious attacks. Service Oriented Architecture (SOA) are adopted to develop the federated smart infrastructure testbed in order to enable researchers and educators to publish/discover testbeds that are needed for their research and educational programs. Initially, the Ford Breadboard Smart Car testbed available at the University of Detroit-Mercy, and UA testbeds including IoT Testbed, Virtual Cybersecurity Testbed that is currently hosted on Amazon public cloud, and Wireless Security Testbed are used for federation, experimentation and evaluation. Open communication standards and security tools that are developed at the NSF Center for Cloud and Autonomic Computing are used to maintain the security and privacy of the federated security testbed. These services allow heterogeneous testbeds to communicate their data syntactically and semantically, enabling accurate interpretation of the semantics of data received and the dependencies among these testbeds.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.