TWC: Medium: Title: SDR Shield: A Hardware-based Security Solution for Software Defined Radio

TWC：媒介：标题：SDR Shield：软件定义无线电的基于硬件的安全解决方案

• 批准号: 1228903
• 负责人: Yaling Yang
• 金额: $ 70万
• 依托单位: Virginia Polytechnic Institute and State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-09-01 至 2017-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1228903&HistoricalAwards=false
• 关键词: TWC; Medium; Title; SDR; Shield

Software Defined Radio (SDR) technology has the flexibility of implementing a large part of physical layer functions in software. It is one of the major technologies that will provide broadband services to millions of US residences. However, unlike conventional radio whose RF signals are tightly regulated by FCC-certified hardware, the software components of SDR can be easily exploited by hackers to create a wide range of unauthorized waveforms to launch attacks on many security-critical wireless systems. The existing preventive software-based security counter measures are not possible to prevent the myriad of potential software security loopholes and themselves often become targets of the malware. The objective of this project is to design an effective hardware-based SDR integrity assessment and behavior regulation device named SDR Shield. SDR Shield resides between the vulnerable SDR software and the security-critical SDR hardware to detect any malicious configuration of the RF device and prevent it from being used to attack wireless systems. The SDR Shield uses side channel and communication channel information from different SDR components to detect deviations from expected execution status. SDR shield also includes a regulation circuit to enforce safety-critical properties of SDR operation. A secure update process is developed to maintain SDR shield?s flexibility and its own security. The generality of SDR Shield?s design provides a unified security mechanism for SDR design and hence can ease the burden on FCC or any future SDR design verification institutes in certifying security measures of SDR products.

软件定义无线电（SDR）技术具有可以通过软件实现大部分物理层功能的灵活性。它是将为数百万美国家庭提供宽带服务的主要技术之一。 然而，与射频信号受到 FCC 认证硬件严格监管的传统无线电不同，SDR 的软件组件很容易被黑客利用来创建各种未经授权的波形，从而对许多安全关键型无线系统发起攻击。现有的基于软件的预防性安全对策无法防止无数潜在的软件安全漏洞，并且它们本身常常成为恶意软件的目标。 该项目的目标是设计一种有效的基于硬件的SDR完整性评估和行为监管设备，名为SDR Shield。 SDR Shield 位于易受攻击的 SDR 软件和安全关键型 SDR 硬件之间，可检测 RF 设备的任何恶意配置并防止其被用于攻击无线系统。 SDR Shield 使用来自不同 SDR 组件的侧通道和通信通道信息来检测与预期执行状态的偏差。 SDR 扩展板还包括一个调节电路，以增强 SDR 操作的安全关键特性。开发了安全更新流程以保持 SDR 扩展板的灵活性及其自身的安全性。 SDR Shield设计的通用性为SDR设计提供了统一的安全机制，从而可以减轻FCC或未来任何SDR设计验证机构对SDR产品安全措施进行认证的负担。