CRII: CNS: Integrating Security Tasks into Multicore Real-Time Systems

该奖项全部或部分由《2021年美国救援计划法案》（公法117-2）资助。现代社会的许多关键系统（例如汽车的发动机控制单元、制造业和发电厂的逻辑控制器、飞机控制和导航系统、工业控制系统、机器人辅助医疗中的传感和感知系统）都有“实时”（即严格的定时和安全）要求。正如最近的现实攻击所揭示的那样，新兴的物联网特定应用（例如，联网的自动驾驶汽车、无人驾驶飞行器）、现成组件的趋势使用以及广泛的互联网/网络连接扩大了这些关键系统发生安全漏洞的可能性。本研究的关键创新是开发了一个统一的框架，将监测和检测机制集成为实时系统设计中的一流元素，特别是那些用多核芯片构建的实时系统。该项目将(a)设计新颖的算法、调度模型和框架，将安全性集成到能够识别实时需求的多核平台中，(b)构建设计时工具和系统级插件，将提议的技术整合到现成的系统中，以及(c)开发指标，以仔细权衡两个相互竞争的需求：及时性和安全性。这些想法将通过在两个现成的平台上进行实验和测试来验证：一个多地形漫游车和一个六自由度机械臂。这项研究将推动该领域的发展，使系统设计者能够更好地理解如何集成安全问题，重点是揭示安全权衡，以确保对实时属性的最小（或没有）扰动。作为该项目的一部分开发的技术将使安全关键的实时系统更加安全，并适用于各种领域（例如，汽车，航空电子设备，无人机，太空漫游者，电网，制造工厂，医疗设备，工业控制系统）。拟议的研究和教育计划将增强下一代网络物理系统和网络安全技术劳动力的知识。该奖项支持培训研究生和本科生，在威奇托州立大学开发新的安全课程，并将研究成果整合到教育材料中。所有硬件、软件和系统实现（包括文档和教程）将在公共存储库（https://github.com/CPS2RL）中免费提供，供教育工作者、科学家、行业人员和业余爱好者访问和使用。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

This award is funded in whole or in part under the American Rescue Plan Act of 2021 (Public Law 117-2).Many critical systems of modern society (e.g., engine control units in automobiles, logic controllers in manufacturing and power plants, aircraft control and navigation systems, industrial control systems, sensing and perception systems in robot-aided healthcare) have "real-time" (i.e., strict timing and safety) requirements. Emerging Internet-of-things-specific applications (e.g., connected autonomous cars, unmanned aerial vehicles), the trending use of off-the-shelf components, and widespread Internet/network connectivity expand the possibility of security breaches in those critical systems, as revealed by recent real-world attacks. The key innovation of this research is the development of a unified framework to integrate monitoring and detection mechanisms as first-class elements within the design of real-time systems, especially those built with multicore chips. This project will (a) devise novel algorithms, scheduling models, and frameworks to integrate security into multicore platforms that are cognizant of real-time requirements, (b) build design-time tools and system-level plugins to incorporate the proposed techniques into off-the-shelf systems, and (c) develop metrics to carefully trade-off two contending requirements: timeliness and security. The ideas will be validated through experimentation and testing on two off-the-shelf platforms: a multi-terrain rover and a six-degree-of-freedom robotic arm.This research will advance the field by enabling system designers to better understand how to integrate security concerns, with a focus on revealing security trade-offs to ensure minimal (or no) perturbations on real-time properties. Techniques developed as part of this project will make safety-critical, real-time systems more secure and applicable to various domains (e.g., automobiles, avionics, drones, space rovers, power grids, manufacturing plants, medical devices, industrial control systems). The proposed research and educational plans will enhance the knowledge of the next-generation technological workforce in cyber-physical systems and cyber-security. This award supports the training of graduate and undergraduate students, the development of a new security course at Wichita State University, and the integration of research findings into educational materials. All hardware, software, and system implementations (including documentation and tutorials) will be freely available in a public repository (https://github.com/CPS2RL) for educators, scientists, industry personnel, and hobbyists to access and use.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.