Collaborative Research: SaTC: CORE: Medium: Safeguarding Next-Generation Emergency Services (NG-9-1-1) over Cellular Networks: From Design to Practice

下一代9-1-1 （NG-9-1-1）服务是基于ip的系统，支持所有类型的紧急通信，例如语音、视频和文本。全球部署的无所不在的5G/4G蜂窝网络是最容易获得应急服务的工具。然而，基于ip的蜂窝应急服务的安全性在很大程度上仍未得到探索。由于911服务对我们的社会至关重要，因此消除潜在的漏洞并确保其安全性非常重要。该项目旨在保护蜂窝网络上的NG-9-1-1服务从设计到运营。该项目的新颖之处在于系统地揭示蜂窝应急服务的不安全设计缺陷、操作失误和实施缺陷，同时通过多学科方法确保可持续安全。该项目更广泛的意义和重要性在于，通过探索有助于执行创新应急服务建模、漏洞分析、数据收集/挖掘和测试自动化解决方案的新方法，将最先进的应急服务安全研究扩展到一个新的前沿。该项目还旨在通过在网络安全、无线和移动系统以及机器学习等关键领域培训学生，为国家未来的劳动力做出贡献。本项目包括三个研究重点：(1)开发发现蜂窝应急服务设计缺陷的新技术。该推力将建立一个新的多级应急服务验证器，该验证器采用并应用模型检查技术，有效地正式检查各种蜂窝应急服务规范、要求和法规；(2)创造能够分析和识别实施问题和应急服务潜在操作失误的新技术。开发软件无线电NG-9-1-1服务平台。建立全面的测试数据集，涵盖异常和正常使用场景；(3)建立NG-9-1-1服务测试平台，对发现的漏洞进行自动检查和后续复核，确保安全的可持续性。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The next-generation 9-1-1 (NG-9-1-1) services are IP-based systems that supports all types of emergency communications, e.g., voice, video, and text. The globally deployed 5G/4G cellular networks with ubiquitous coverage are the most accessible vehicles for emergency services. However, the security of IP-based cellular emergency services is still largely unexplored. Since 911 services are critical to our society, it is extremely important to eliminate potential vulnerabilities and ensure their security. This project aims to safeguard NG-9-1-1 services over cellular networks from their designs to operations. The project's novelties are to systematically uncover insecure design defects, operational slips, and implementation flaws of cellular emergency services while ensuring sustainable security through a multi-disciplinary approach. The project's broader significance and importance are to extend the state-of-the-art emergency service security research to a new frontier by exploring novel methods that can help perform innovative emergency service modeling, vulnerability analysis, data collection/mining, and testing automation solutions. The project also aims to contribute to nation's future workforce by training students in critical areas such as network security, wireless and mobile systems, and machine learning.This project comprises three research thrusts: (1) to develop new techniques for discovering design flaws of cellular emergency services. This thrust will build a novel multi-level emergency service verifier that adopts and applies model-checking techniques to formally examine diversified cellular emergency service specifications, requirements, and regulations efficiently; (2) to create new techniques that can analyze and identify both implementation issues and potential operational slips of emergency services. A software-defined-radio NG-9-1-1 service platform will be developed. A comprehensive testing dataset will be built to cover both abnormal and normal use scenarios; and (3) to build an NG-9-1-1 service testing platform that allows automatic checking and follow-on re-examination of discovered vulnerabilities to ensure sustainable security.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.