WiFiUS: Collaborative Research: SELIOT: Securing Lifecycle of Internet-of-Things

WiFiUS：协作研究：SELIOT：保护物联网生命周期

基本信息

批准号：
1702911
负责人：
Gene Tsudik
金额：
$ 15万
依托单位：
University of California-Irvine
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2017
资助国家：
美国
起止时间：
2017-04-01 至 2019-03-31
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=1702911&HistoricalAwards=false
关键词：
WiFiUS Collaborative Research SELIOT Securing

项目摘要

This project focuses on developing effective and efficient methods for detection of vulnerable devices in an IoT network, as well as mitigation techniques, as a reaction to identified vulnerabilities. The vision for the scientific impact of this project is a comprehensive set of tools for securing networked IoT devices throughout their lifecycle, coupled with the requirement to co-exist with inherently vulnerable or legacy devices. The project aims to achieve this vision by focusing on three phases of an IoT device's lifecycle:1. Birth: identify vulnerable devices when they are first introduced into an IoT network.2. Life: verify the configuration and operation of devices during their normal operation and updating firmware even in resource-constrained devices. 3. Repurposing: infer changes in device ownership (including disposal) and perform secure deletion of sensitive data whenever ownership change is confirmed.All of the above will be achieved with a strong emphasis on assuring that new security techniques are meaningful and usable by a wide range of users.Research outcomes of this project are expected to benefit society in addressing important IoT security problems before manufacturers saturate the market with ostensibly useful and innovative gadgets that lack sufficient security features, thus being vulnerable to attacks and malware infestations, which can turn them into rogue agents. PhD students involved in the project will benefit from unique opportunities for developing valuable research skills in the important emerging area of IoT security, as well as collaborating with international partners, thus exposing them to new research perspectives. One aspect of anticipated impact is in training the next generation of information security experts who, beyond understanding and appreciating security and privacy concerns in IoT, are also sufficiently skilled to address them. Another aspect of this project's impact will be achieved by transferring our results into prototypes, which can be turned into products and services.

该项目着重于开发有效，有效的方法来检测物联网网络中的脆弱设备以及缓解技术，以此作为对已确定漏洞的反应。对该项目的科学影响的愿景是一套全面的工具，用于确保其整个生命周期的网络IoT设备，以及与固有脆弱或传统设备共存的要求。该项目旨在通过关注物联网设备生命周期的三个阶段来实现这一愿景：1。出生：首次将其引入IoT网络时，请确定弱势设备2。生活：即使在资源约束设备中，设备在正常操作中验证设备的配置和操作，并更新固件。 3。重新提示：在确认所有权变化时，请推断设备所有权（包括处置）并确定敏感数据的安全删除。所有这些都将实现上述所有内容。都非常强调确保确保新的安全技术具有有意义的有意义，并且可以通过广泛的用户范围内的范围来解决该项目的范围。足够的安全功能，因此容易受到攻击和恶意软件的影响，这可能会使它们变成流氓代理。参与该项目的博士生将受益于在物联网安全的重要新兴领域发展有价值的研究技能的独特机会，并与国际合作伙伴合作，从而使他们接触到新的研究观点。预期影响的一个方面是培训下一代信息安全专家，除了理解和欣赏物联网中的安全性和隐私问题外，他们还足以解决这些问题。该项目影响的另一个方面将通过将我们的结果转移到原型中来实现，该原型可以变成产品和服务。

项目成果

期刊论文数量（11）

专著数量（0）

科研奖励数量（0）

会议论文数量（0）

专利数量（0）

Reconciling remote attestation and safety-critical operation on simple IoT devices

协调简单物联网设备上的远程认证和安全关键操作

DOI：
10.1145/3195970.3199853
发表时间：
2018
期刊：
DAC '18 Proceedings of the 55th Annual Design Automation Conference
影响因子：
0
作者：
Carpent, Xavier;Eldefrawy, Karim;Rattanavipanon, Norrathep;Sadeghi, Ahmad-Reza;Tsudik, Gene
通讯作者：
Tsudik, Gene

Remote Attestation of IoT Devices via SMARM: Shuffled Measurements Against Roving Malware

DOI：
10.1109/hst.2018.8383885
发表时间：
2018-01-01
期刊：
PROCEEDINGS OF THE 2018 IEEE INTERNATIONAL SYMPOSIUM ON HARDWARE ORIENTED SECURITY AND TRUST (HOST)
影响因子：
0
作者：
Carpent, Xavier;Rattanavipanon, Norrathep;Tsudik, Gene
通讯作者：
Tsudik, Gene

ERASMUS: Efficient Remote Attestation via Self-Measurement for Unattended Settings

DOI：
10.23919/date.2018.8342195
发表时间：
2018-01-01
期刊：
PROCEEDINGS OF THE 2018 DESIGN, AUTOMATION & TEST IN EUROPE CONFERENCE & EXHIBITION (DATE)
影响因子：
0
作者：
Carpent, Xavier;Rattanavipanon, Norrathep;Tsudik, Gene
通讯作者：
Tsudik, Gene

Remote Attestation via Self-Measurement

通过自我测量进行远程认证