NSF Convergence Accelerator Track G: PETS: Programmable Zero-Trust Security for Operating Through 5G Infrastructure

5G移动通信技术已经标准化，为各种设备提供高速互联网连接，并支持多样化的应用/服务。当国防部等用户希望通过当前的5G基础设施安全运行时，对增强安全性的要求正成为一个关键问题。该提案的目标是在通过现有的5G基础设施运营时，为国防部(以及任何5G用户和运营商)提供新的、灵活和可编程的零信任安全能力。该项目为现有和未来的5G安全运营和研究提供了坚实的基础和协作社区。关键的更广泛的社会影响和社会利益包括改善经济产出、安全、安保、隐私、监管成本、责任、中断保护和接入分配。这个多研究所项目包括来自多个学术机构(包括HBCU)和行业合作伙伴的安全、网络/通信、电信运营、融合研究、公共政策、用户研究、团队科学和国家安全应用方面的专家。该项目力求通过与不同的利益攸关方群体接触，包括私营和公共组织、决策者和公众成员，特别是代表性不足的少数群体，扩大对融合加速器研究的参与。在团队集体完成的现有研究的基础上，该项目建议构建名为PETS的创新可编程零信任安全解决方案，以实现跨整个5G基础设施(包括终端设备、5G无线接入网络(RAN)和5G核心网络)的统一、基础设施范围、动态和细粒度的流级安全控制。基于所提出的系统，5G运营商、开发者和/或用户可以轻松地编写安全应用程序，以定制他们特定的安全需求，实现零信任安全功能。这类新的安全应用可以持续维护和评估接入风险，并在5G基础设施中提供更细粒度、可编程的访问控制和资源隔离。该项目允许军事、政府或关键基础设施运营商通过现有的5G基础设施安全地运营非合作或合作网络。它还能够在编程动态和智能安全应用程序方面实现新的创新，以保护整个5G基础设施。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

5G mobile communication technology has been standardized to provide high-speed Internet connectivity to various devices and support diverse applications/services. The request for enhanced security is becoming a critical issue when users such as DoD want to securely operate through the current 5G infrastructure. The goal of this proposal is to provide the DoD (and any 5G users and operators) with new, flexible, and programmable zero-trust security capability when operating through existing 5G infrastructure. This project provides a solid foundation and collaborative community for existing and future 5G security operation and research. The key broader social impacts and societal benefits include improved economic outputs, safety, security, privacy, cost of regulation, liability, interruption protection, and distribution of access. This multi-institute project includes experts in security, networking/communication, telecom operation, convergence research, public policy, user study, team science, and national security applications from multiple academic institutions (including an HBCU) and industry partners. This project seeks to broaden participation in the convergence accelerator research by engaging with diverse stakeholder groups including private and public organizations, decision makers, and members of the public, particularly under-represented minority groups. Transitioning from existing research collectively done by the team, this project proposes to build an innovative programmable zero-trust security solution called PETS to enable unified, infrastructure-wide, dynamic, and granular flow-level security control across the entire 5G infrastructure, including end devices, 5G Radio Access Network (RAN), and 5G core network. Based on the proposed system, the 5G operators, developers and/or users can easily write security applications to customize their specific security needs and realize zero-trust security features. Such new security applications can continuously maintain and evaluate risks of accesses, and provide finer-grained, programmable access control and isolation of resources in 5G infrastructure. This project allows military, government, or critical infrastructure operators to securely operate through existing 5G infrastructure with respect to either non-cooperative or cooperative networks. It also enables new innovations in programming dynamic and intelligent security applications to protect the entire 5G infrastructure.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.