WiFiUS: Collaborative Research: SELIOT: Securing Lifecycle of Internet-of-Things

WiFiUS：协作研究：SELIOT：保护物联网生命周期

• 批准号: 1702911
• 负责人: Gene Tsudik
• 金额: $ 15万
• 依托单位: University of California-Irvine
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-04-01 至 2019-03-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1702911&HistoricalAwards=false
• 关键词: WiFiUS; Collaborative; Research; SELIOT; Securing

This project focuses on developing effective and efficient methods for detection of vulnerable devices in an IoT network, as well as mitigation techniques, as a reaction to identified vulnerabilities. The vision for the scientific impact of this project is a comprehensive set of tools for securing networked IoT devices throughout their lifecycle, coupled with the requirement to co-exist with inherently vulnerable or legacy devices. The project aims to achieve this vision by focusing on three phases of an IoT device's lifecycle:1. Birth: identify vulnerable devices when they are first introduced into an IoT network.2. Life: verify the configuration and operation of devices during their normal operation and updating firmware even in resource-constrained devices. 3. Repurposing: infer changes in device ownership (including disposal) and perform secure deletion of sensitive data whenever ownership change is confirmed.All of the above will be achieved with a strong emphasis on assuring that new security techniques are meaningful and usable by a wide range of users.Research outcomes of this project are expected to benefit society in addressing important IoT security problems before manufacturers saturate the market with ostensibly useful and innovative gadgets that lack sufficient security features, thus being vulnerable to attacks and malware infestations, which can turn them into rogue agents. PhD students involved in the project will benefit from unique opportunities for developing valuable research skills in the important emerging area of IoT security, as well as collaborating with international partners, thus exposing them to new research perspectives. One aspect of anticipated impact is in training the next generation of information security experts who, beyond understanding and appreciating security and privacy concerns in IoT, are also sufficiently skilled to address them. Another aspect of this project's impact will be achieved by transferring our results into prototypes, which can be turned into products and services.

该项目的重点是开发有效且高效的方法来检测物联网网络中的易受攻击设备以及缓解技术，作为对已识别漏洞的反应。该项目的科学影响的愿景是提供一套全面的工具，用于在整个生命周期中保护联网物联网设备的安全，并满足与固有易受攻击或遗留设备共存的要求。该项目旨在通过关注物联网设备生命周期的三个阶段来实现这一愿景：1。诞生：在首次引入物联网网络时识别易受攻击的设备。2。寿命：验证设备在正常运行期间的配置和操作，并更新固件，即使在资源有限的设备中也是如此。 3. 重新调整用途：推断设备所有权的变化（包括处置），并在确认所有权变化时安全删除敏感数据。实现上述所有目标的重点是确保新的安全技术对广泛的人有意义且可用该项目的研究成果预计将有利于社会解决重要的物联网安全问题，以免制造商​​用表面上有用和创新的小工具饱和市场，但这些小工具缺乏足够的安全功能，因此容易受到攻击和恶意软件感染，这可能会导致市场崩溃。他们变成了流氓特工。参与该项目的博士生将受益于在物联网安全这一重要新兴领域发展宝贵研究技能的独特机会，以及与国际合作伙伴的合作，从而使他们接触到新的研究视角。预期影响的一方面是培训下一代信息安全专家，他们除了理解和认识物联网的安全和隐私问题之外，还具备足够的技能来解决这些问题。该项目影响的另一个方面将通过将我们的成果转化为原型来实现，原型可以转化为产品和服务。

项目成果

Reconciling remote attestation and safety-critical operation on simple IoT devices

协调简单物联网设备上的远程认证和安全关键操作

• DOI: 10.1145/3195970.3199853
• 发表时间: 2018-06
• 期刊: DAC '18 Proceedings of the 55th Annual Design Automation Conference
• 作者: Carpent, Xavier;Eldefrawy, Karim;Rattanavipanon, Norrathep;Sadeghi, Ahmad;Tsudik, Gene
• 通讯作者: Tsudik, Gene

Remote Attestation via Self-Measurement

通过自我测量进行远程认证

• DOI: 10.1145/3279950
• 发表时间: 2019-01
• 期刊: ACM Transactions on Design Automation of Electronic Systems
• 影响因子: 1.4
• 作者: Carpent, Xavier;Rattanavipanon, Norrathep;Tsudik, Gene
• 通讯作者: Tsudik, Gene

ERASMUS: Efficient remote attestation via self-measurement for unattended settings

ERASMUS：通过无人值守设置的自我测量进行高效远程认证

• DOI: 10.23919/date.2018.8342195
• 发表时间: 2017-07-27
• 期刊: 2018 Design, Automation & Test in Europe Conference & Exhibition (DATE)
• 作者: Xavier Carpent;Norrathep Rattanavipanon;G. Tsudik
• 通讯作者: G. Tsudik

Remote attestation of IoT devices via SMARM: Shuffled measurements against roving malware

通过 SMARM 对物联网设备进行远程认证：针对流动恶意软件的随机测量

• DOI: 10.1109/hst.2018.8383885
• 发表时间: 2018-04-01
• 期刊: 2018 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)
• 作者: Xavier Carpent;Norrathep Rattanavipanon;G. Tsudik
• 通讯作者: G. Tsudik

ASSURED: Architecture for Secure Software Update of Realistic Embedded Devices

ASSURED：现实嵌入式设备安全软件更新的架构

• DOI: 10.1109/tcad.2018.2858422
• 发表时间: 2018-11
• 期刊: IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems
• 影响因子: 2.9
• 作者: Asokan, N.;Nyman, Thomas;Rattanavipanon, Norrathep;Sadeghi, Ahmad;Tsudik, Gene
• 通讯作者: Tsudik, Gene