Secure Wireless Agile Networks (SWAN)

无线接入对于支撑现代生活的网络至关重要，它为构成物联网（IoT）的人员、车辆、机器、基础设施和各种设备提供通信。它们在支持安全运输和未来医疗保健方面将变得越来越重要。社会越来越容易受到网络攻击，攻击的动机从金融勒索到恐怖主义破坏再到颠覆。网络攻击可以通过网络远程进行，这对那些可以在世界任何地方安全、匿名操作的犯罪分子来说都很有吸引力。网络防御和相关研究已变得至关重要，主要针对开发和推出网络协议中的技术加密和身份验证措施，并在组织中嵌入基本流程。然而，随着攻击者发现系统设计中没有考虑到的新漏洞或由于不完善的实现而产生的漏洞，攻击者的攻击仍在继续。解决这些问题需要在威胁出现时更新网络元素的功能和凭据。相比之下，通过无线接口进行网络攻击，利用物理层和协议栈低层的漏洞，受到的关注要少得多。随着网络攻击变得越来越困难，可以预期，更多的攻击将通过“空中接口”进行。随着低成本软件定义无线电（SDR）平台和开源软件的普及，以及可能被黑客攻击的无线终端无处不在，开发和发动此类攻击的手段越来越容易获得。需要对这一问题进行更多的研究，以找到可追溯应用于现有系统的解决方案，影响下一代无线标准，提高对潜在问题的认识，并培训工程师在无线电标准和产品中开发和嵌入防御能力。关键是通过改变系统软件来改变物理层功能，包括天线。这在当前的设备上是不可能的，在5G中也是不可能的。除了应对安全威胁外，未来还需要这类技术来实现动态频谱接入（DSA）。在动态频谱接入（DSA）中，频谱将根据不断变化的空间和时间需求动态分配，而不是以行政方式向特定用户发放频段许可。项目合作伙伴东芝研究公司、洛克、布里斯托尔大学和英国政府通信总部在这一研究合作伙伴关系中共同开发安全无线敏捷网络（SWAN）。项目范围将包括技术可交付成果；政策和标准的形成；以及SWAN团队的培训和职业发展。联合创建的为期5年的项目将整合学术和工业团队的活动，以解决以下研究挑战（rc）。威胁综合与评估：射频接口如何受到攻击，超出其设计中设想的威胁？射频网络检测与防御：检测射频网络攻击并减轻其影响的技术。网络安全无线电设计：设计射频特性可以在现场更新以应对新威胁的无线电，这也使DSA成为可能。4. 安全动态频谱接入：使能技术安全共享频谱，以实现最有效的使用。不解决上述问题的后果可能会使无线信道成为网络攻击的开放攻击面。SWAN的技术解决方案将使英国处于使无线系统的基本参数和架构能够适应新频谱和接口规范的最前沿；对意外或诱发故障（如干扰）具有弹性；并且能抵抗网络攻击。

Wireless access is an essential to the networks that underpin modern life, providing communications for people, vehicles, machines, infrastructure, and the wide variety of devices that will make up the Internet of Things (IoT). They will become increasingly important to support safe transportation and future healthcare. Society is increasingly vulnerable to network cyber attack, for motivations ranging from financial extortion through terrorist disruption to subversion. Cyber attacks can be mounted remotely through networks, making them attractive to malefactors who can operate safely and anonymously from anywhere in the world. Cyber defence and associated research has become critical, mainly directed at developing and rolling out technical encryption and authentication measures in the network protocols and embedding the essential processes in organisations. Nevertheless exploits continue as attackers discover new vulnerabilities that were not considered in the system design or arise through imperfect implementations. Fixing these requires updating both functionality and credentials of the network elements as threats emerge.By contrast cyber-attack via the wireless interface, exploiting vulnerabilities in the physical layer and lower layers of the protocol stack, has received much less attention. As network originated exploits become more difficult it can be expected that more attacks will be mounted through the "air interface". The means to develop and mount such attacks are increasingly available with the proliferation of low cost software-defined radio (SDR) platforms and open-source software, and the ubiquity of potentially hackable wireless terminals. More research on this problem is needed to find solutions to be retrospectively applied to existing systems, influence the next generation of wireless standards, raise awareness of the potential problems, and train engineers to develop and embed defensive capability in radio standards and products. Crucial will be the ability to change the physical layer functionality, right to the antenna, by changing system software. This is not possible with current equipment or indeed envisaged in the 5G. Apart from countering the security threat, such technology will be needed to enable the future adoption of Dynamic Spectrum Access (DSA), in which, rather than frequency bands being administratively licensed to specific users, spectrum will be allocated dynamically according to evolving demand in space and time.The project partners, Toshiba Research, Roke, University of Bristol, and GCHQ, share a vision of Secure Wireless Agile Networks (SWAN) to be developed in this research partnership. The project scope will include technical deliverables; the shaping of policy and standards; and the training and career development of the SWAN teams. The co-created 5-year programme will integrate academic and industrial teams in activities that address the following Research Challenges (RCs).1. Threat Synthesis & Assessment: how can RF interfaces be attacked, beyond the threats envisaged in their design?2. RF Cyber Detection & Defence: techniques to detect RF cyber attack and mitigate their effects.3. Cyber Secure Radio Design: designing radios whose RF characteristics can be updated in the field to deal with new threats, which also enable DSA. 4. Secure Dynamic Spectrum Access: enabling technology for securely sharing spectrum for most efficient usage.The consequences of not addressing the above will potentially make the wireless channel an Open Attack Surface for cyber attack. SWAN's technological solutions will place the UK at the forefront of enabling the fundamental parameters and architectures of wireless systems to be adaptable to new spectrum and interface specifications; resilient to accidental or induced failures (such as jamming); and resistant to cyber-attack.