TC: Large: Securing the Open Softphone

TC：大型：保护开放软电话

• 批准号: 1012910
• 负责人: Mark Crovella
• 金额: $ 299.99万
• 依托单位: Trustees of Boston University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-07-01 至 2016-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1012910&HistoricalAwards=false
• 关键词: TC; Large; Securing; Open; Softphone

Mobile phones are in the midst of a dramatic transformation; they are becoming highly powerful sensor-rich software-controlled computing and communication devices. These "softphones" are increasingly entrusted with maintaining users' electronic identity, calendars, social networks, and even bank accounts. However, the vast increases in the flexibility of softphones comes with equally large security issues and opportunities, some of which we are only beginning to understand.This project studies the new threats and promises of softphones, and focuses on identifying, understanding, and mitigating new security risks. Two broad risk categories are addressed: threats to individual users (such as user privacy or personal finances), and threats to the entire communication system (such as disruptions to emergency services). The project ultimately aims to understand how security problems associated with softphones and their networks are different from those of traditional computers and networks, and how to harness the unique capabilities of softphones for improved security.The research is being conducted by a broad and diverse team of nine senior investigators, in collaboration with international industry and academic partners, under the aegis of the RISCS Center at Boston University. The project is striving for wide impact through a public seminar series, multiple workshops, course development in phone security across all levels (including honors courses), and cross-disciplinary training of graduate and undergraduate studentsThe project's successful conclusion will deliver an essential and timely understanding of how to secure the mobile phone infrastructure that already manages many intimate aspects of our lives.

移动电话正处于巨大的变革之中。它们正在成为功能强大、富含传感器、软件控制的计算和通信设备。 这些“软件电话”越来越多地负责维护用户的电子身份、日历、社交网络，甚至银行账户。 然而，软件电话灵活性的大幅提高也带来了同样巨大的安全问题和机遇，其中一些问题我们才刚刚开始了解。该项目研究软件电话的新威胁和前景，重点是识别、理解和缓解新威胁。安全风险。 解决了两大类风险：对个人用户的威胁（例如用户隐私或个人财务），以及对整个通信系统的威胁（例如紧急服务中断）。该项目的最终目标是了解与软件电话及其网络相关的安全问题与传统计算机和网络的安全问题有何不同，以及如何利用软件电话的独特功能来提高安全性。该研究由广泛而多样化的团队进行在波士顿大学 RISCS 中心的支持下，九名高级研究人员与国际行业和学术伙伴合作。 该项目力求通过一系列公开研讨会、多个研讨会、各级电话安全课程开发（包括荣誉课程）以及对研究生和本科生的跨学科培训来产生广泛影响。该项目的成功结束将提供重要而及时的理解如何保护已经管理我们生活许多私密方面的移动电话基础设施的安全。