NeTS: Small: Exploring the Design, Implementation, Operation Issues of Cellular IoT via Formal Analysis and Empirical Validation

NeTS：小型：通过形式分析和实证验证探索蜂窝物联网的设计、实施和操作问题

• 批准号: 1814551
• 负责人: GUAN-HUA TU
• 金额: $ 50万
• 依托单位: Michigan State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-10-01 至 2023-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1814551&HistoricalAwards=false
• 关键词: NeTS; Small; Exploring; Design; Implementation

The Internet of Things is coming into our daily life. As the only large-scale wireless network infrastructure on a par with the Internet, the cellular network plays a critical role in interconnecting a variety of things. Connected cellular IoT (CIoT) devices are forecast to grow almost four-fold from 2015 (0.4 billion) to 2021 (1.5 billion). With the explosive growth of CIoT devices, any design defects of CIoT standards, implementation issues of CIoT devices, and operational slips of CIoT service operators could lead to devastating consequences on a global scale. This project seeks to conduct a full investigation of CIoT services from their design, implementation and operation perspectives. The successful completion of this project will not only contribute new techniques to identify design defects, implementation issues, and operational slips of CIoT services, but also facilitate the deployment of CIoT services and boost the CIoT economy in the U.S. The research findings may also influence the design of CIoT in the upcoming 5G wireless networks.The proposed research has three key areas of technical contributions. First, it aims to develop a CIoT control-plane protocol verification tool based on formal methods, which identifies design defects of CIoT standards in terms of functional incorrectness, performance downgrade, and security issues. Second, it aims to develop a rigorous testing methodology for exploring the implementation issues and operational slips of CIoT practice, which covers CIoT conformance testing standards, CIoT practice, and feedbacks from SQA (Software Quality Assurance) experts in the CIoT industry. Third, it aims to develop an open-source CIoT test-bed including CIoT terminals and infrastructure to verify the possible design defects, implementation issues, and operational slips which are hardly to be validated in practice due to security, business, and other concerns. This CIoT test-bed will be released to the research community for future CIoT research. Besides technical contributions, the proposed project allows the researchers to integrate their research findings into both undergraduate and graduate curricula for both Electrical and Computer Engineering and Computer Science majors. Finally, this project will contribute to the nation's workforce by training students to obtain technical expertise in mobile systems, wireless networking, and formal methods.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

物联网正在进入我们的日常生活中。作为与Internet相当的唯一大型无线网络基础架构，蜂窝网络在互连各种事物方面起着至关重要的作用。预计从2015年（44亿）到2021年（15亿），连接的细胞物联网（CIOT）设备将增长近四倍。随着CIOT设备的爆炸性增长，CIOT标准的任何设计缺陷，CIOT设备的实施问题以及CIOT服务运营商的运营滑倒可能会导致全球范围内的毁灭性后果。该项目旨在从其设计，实施和操作角度对CIOT服务进行全面调查。该项目的成功完成不仅将为确定CIOT服务的设计缺陷，实施问题和运营单，而且还促进了美国CIOT服务的部署，并促进了美国的CIOT经济的部署，研究结果也可能影响CIOT在即将到来的5G无线网络中的CIOT设计。提议拟议的研究有三个关键领域的技术贡献。首先，它旨在根据正式方法开发CIOT控制平面协议验证工具，该方法在功能不正确，绩效降级和安全问题方面确定了CIOT标准的设计缺陷。其次，它旨在开发一种严格的测试方法，以探索CIOT实践的实施问题和运营单，其中涵盖了CIOT行业中SQA（软件质量保证）专家的CIOT符合测试标准，CIOT实践和反馈。第三，它旨在开发包括CIOT终端和基础设施在内的开源CIOT测试床，以验证由于安全，业务和其他问题而在实践中几乎无法在实践中验证的可能的设计缺陷，实施问题和运营滑移。该CIOT测试床将被发布给研究社区，以进行未来的CIOT研究。除技术贡献外，该项目还允许研究人员将其研究结果纳入电气和计算机工程以及计算机科学专业的本科和研究生课程。最后，该项目将通过培训学生获得移动系统，无线网络和正式方法方面的技术专业知识来为国家的劳动力做出贡献。该奖项反映了NSF的法定任务，并被认为是值得通过基金会的知识分子优点和更广泛影响的评估评估的评估来获得支持的。

项目成果

Exploring the Insecurity of Google Account Registration Protocol via Model Checking

通过模型检查探索Google帐户注册协议的不安全性

• DOI: 10.1109/ssci44817.2019.9003113
• 发表时间: 2019
• 期刊: 2019 IEEE Symposium Series on Computational Intelligence (SSCI
• 作者: Xie, Tian;Wang, Sihan;Tu, Guan-Hua;Li, Chi-Yu;Lei, Xinyu
• 通讯作者: Lei, Xinyu

Security Threats from Bitcoin Wallet Smartphone Applications: Vulnerabilities, Attacks, and Countermeasures

比特币钱包智能手机应用程序的安全威胁：漏洞、攻击和对策

• DOI: 10.1145/3422337.3447832
• 发表时间: 2021
• 期刊: CODASPY '21: Proceedings of the Eleventh ACM Conference on Data and Application Security and Privacy
• 作者: Hu, Yiwen;Wang, Sihan;Tu, Guan-Hua;Xiao, Li;Xie, Tian;Lei, Xinyu;Li, Chi-Yu
• 通讯作者: Li, Chi-Yu

MPKIX: Towards More Accountable and Secure Internet Application Services via Mobile Networked Systems

• DOI: 10.1109/tmc.2022.3141694
• 发表时间: 2023-06
• 期刊: IEEE Transactions on Mobile Computing
• 影响因子: 7.9
• 作者: Tian Xie;Sihan Wang;Xinyu Lei;Jingwen Shi;Guan-Hua Tu;Chi-Yu Li

SecWIR: securing smart home IoT communications via wi-fi routers with embedded intelligence

• DOI: 10.1145/3386901.3388941
• 发表时间: 2020-06
• 期刊: Proceedings of the 18th International Conference on Mobile Systems, Applications, and Services
• 作者: Xinyu Lei;Guan-Hua Tu;Chi-Yu Li;Tian Xie;Mi Zhang

Insecurity of operational cellular IoT service: new vulnerabilities, attacks, and countermeasures

• DOI: 10.1145/3447993.3483239
• 发表时间: 2021-10
• 期刊: Proceedings of the 27th Annual International Conference on Mobile Computing and Networking
• 作者: Sihan Wang;Guan-Hua Tu;Xi Lei;Tian Xie;Chi-Yu Li;Polun Chou;Fu-Cheng Hsieh;Yiwen Hu