CAREER: Foundations for Real-Time System Security

实时系统是一个机电计算平台，它控制一个物理过程，必须在一个有限的时间（即截止日期）之前对输入作出响应。如果错过了最后期限，灾难就会发生。安全关键系统、网络物理系统（CPS）和关键基础设施，包括汽车、飞机、发电厂、制造机器人、卫星、电子道路标志等，都依赖于底层实时系统的正确、安全功能。当其安全性受到损害时，实时系统的功能不正常可能导致危险和致命的后果。该项目的目标是保护实时系统免受网络攻击。这一努力的成果是通过改善国家安全态势和提高人类安全，推动实时安全的理论和实践，造福于公众。该项目的目标是通过全面描述实时系统面临的安全挑战，将实时安全作为一个研究领域带到最前沿。这项工作围绕着调查三个关键的研究目标。第一个目标是通过理解基于调度的攻击，通过移动目标防御减轻这种攻击，以及使用基于规范的入侵检测系统检测调度违规，来形式化保护实时系统调度的威胁和解决方案。第二个目标是在实时嵌入式系统中安全地使用可信的执行环境，包括响应时间分析，与开源的多处理器系统实时执行器（RTEMS）集成，以及增强对侧信道攻击的抵抗力。第三个目标是减轻实时系统中容错机制带来的威胁，通过创建非特权和主动恢复机制的框架来增强故障恢复的安全性。该项目的综合教育和扩大参与活动促进了网络安全劳动力的发展，这是解决该专业技能差距和短缺所必需的。该项目的成功成果的广泛采用将对广泛的CPS和关键基础设施资产产生积极影响。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

A real-time system is an electro-mechanical computing platform that controls a physical process and must respond to inputs before a bounded time known as a deadline. When the deadline is missed, disaster can happen. Safety-critical systems, cyber-physical systems (CPS), and critical infrastructure including cars, airplanes, power plants, manufacturing robots, satellites, electronic roadway signage, and more, all rely upon the correct, safe functioning of the underlying real-time system. When its security is compromised, the improper functioning of a real-time system can cause hazardous and deadly consequences. The objective of this project is to protect real-time systems from cyberattack. The outcomes of this effort are advancing theory and practice of real-time security to the public benefit by improving the national security posture and enhancing human safety.The objective of this project is to bring real-time security to the forefront as a research field by thoroughly characterizing the security challenges facing real-time systems. The effort revolves around investigating three key research aims. The first aim is formalizing the threats and solutions for securing real-time system schedules by way of understanding schedule-based attacks, mitigating such attacks with moving target defense, and detecting schedule violations with a specification-based intrusion detection system. The second aim enables securely using trusted execution environments in real-time embedded systems including response-time analysis, integration with the open-source Real-Time Executive for Multiprocessor Systems (RTEMS), and enhancing resistance to side-channel attacks. The third aim mitigates the threats introduced by fault tolerance mechanisms in real-time systems to enhance the security of fault recovery by creating frameworks for unprivileged and proactive recovery mechanisms. The integrative educational and broadening participation activities of this project advance the cybersecurity workforce development necessary to address skills gaps and shortages in the profession. Widespread adoption of the successful outcomes of this project will positively impact a broad range of CPS and critical infrastructure assets.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.