CICI: RSARC: Secure Time for Cyberinfrastructure Security

CICI：RSARC：网络基础设施安全的安全时间

基本信息

批准号：
1738902
负责人：
Yongqiang Wang
金额：
$ 99.99万
依托单位：
Clemson University
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2017
资助国家：
美国
起止时间：
2017-08-01 至 2023-07-31
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=1738902&HistoricalAwards=false
关键词：
CICI RSARC Secure Time Cyberinfrastructure

项目摘要

The accurate marking and tracking of time plays a key role in scientific discovery and technology advancement. Scientific discovery is becoming increasingly reliant on more precise and reliable timekeeping. For example, the precise synchronization of time enables GPS (Global Positioning System) systems to accurately measure distances between distributed components of scientific instruments. Furthermore, tightly synchronized clocks between the base stations of mobile phone and data networks enable mobile handsets to share limited radio spectrum more efficiently. In fact, many modern critical infrastructures including computer networks, communication systems, electrical power grids, and financial networks rely on precise time and time synchronization for efficient ¬¬and safe operations. However, existing commonly used time synchronization approaches, including both GPS and the Network Time Protocol (NTP), are extremely vulnerable to attacks. As modern research cyberinfrastructure quickly evolves towards a distributed architecture with the incorporation of cloud computing resources and new forms of sensing and computing infrastructures, and as attacks on the time infrastructure have increased, developing secure time synchronization approaches for resilient time service is of paramount importance.The focus of this project is to provide novel and holistic approaches to enable time security for cyberinfrastructures that employ the two most commonly used time synchronization mechanisms, i.e., GPS based and NTP based synchronization. More specifically, the project seeks to provide a security solution as a national service for all civil GPS time users. It will also develop and prototype a redundancy based security solution to NTP synchronization with minimal extra communication overhead. The main thrusts are to: i) establish a reference GPS receiver and server at Clemson University that can be used for GPS receivers across the US to detect spoofing attacks by cross checking encrypted military code in GPS signals; ii) develop a pulse based redundant synchronization approach to verify the reliability of network time provided by NTP; iii) experimentally prototype the two secure time approaches on a flood monitoring platform and a weather station platform, and use them to secure Clemson's campus NTP timing network in collaboration with the Information Technology (IT) department.

准确的标记和跟踪时间在科学发现和技术进步中起着关键作用。科学发现对更精确和可靠的计时越来越敏感。例如，时间的精确同步使GPS（全球定位系统）系统能够准确测量科学仪器分布式组件之间的距离。此外，手机和数据网络的基站之间的紧密同步时钟使移动设备可以更有效地共享有限的无线电频谱。实际上，许多现代关键的基础架构，包括计算机网络，通信系统，电力电网和财务网络，都依赖于精确的时间和时间同步来进行有效的和安全的操作。但是，现有的常用时间同步方法，包括GPS和网络时间协议（NTP），非常容易受到攻击。随着现代研究网络基础构建迅速发展，云计算资源的基础架构以及新的敏感性和计算基础架构的新形式以及对时间基础架构的攻击的攻击增加了，开发安全的时间同步方法的弹性是弹性时期的重点。常用的时间同步机制，即基于GPS和基于NTP的同步。更具体地说，该项目旨在为所有民用GPS时间用户提供安全解决方案作为国民服务。它还将开发并原型制定基于冗余的安全解决方案，以最小的额外通信开销，以实现NTP同步。主要推力是：i）在克莱姆森大学建立参考GPS接收器和服务器，可用于美国各地的GPS接收器，以通过在GPS信号中交叉检查加密的军事密码来检测欺骗攻击； ii）开发一种基于脉冲的冗余同步方法，以验证NTP提供的网络时间的可靠性； iii）实验原型在洪水监控平台和气象站平台上进行了两个安全时间方法，并使用它们与信息技术（IT）部门合作，使用它们来确保Clemson的校园NTP正时网络。