SaTC: CORE: Medium: Collaborative: Toward Enforceable Data Usage Control in Cloud-based IoT Systems

SaTC：核心：媒介：协作：在基于云的物联网系统中实现可执行的数据使用控制

• 批准号: 1916902
• 负责人: Wenjing Lou
• 金额: $ 75万
• 依托单位: Virginia Polytechnic Institute and State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-10-01 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1916902&HistoricalAwards=false
• 关键词: SaTC; CORE; Medium; Collaborative; Toward

In the upcoming evolution of the Internet of Things (IoT), it is anticipated that billions of devices will be connected to the Internet. While IoT promises a more connected and smarter world, this pervasive large-scale data collection, storage, sharing, and analysis raise many privacy concerns. In the current IoT ecosystem, IoT service providers have full control of the collected user data. They use the data for smart IoT system and device control. They could also use the data for other purposes not consented to by the users. This project proposes a novel data usage control framework, PrivacyGuard, that aims to empower data owners with full control over how their sensitive data is used so as to protect the data from certain types of privacy breaches. PrivacyGuard ensures that user data can only be used only by user-approved programs and each use of data has a non-repudiable usage record. Students from underrepresented minority groups will be involved in the research activities.The proposed PrivacyGuard framework aims to achieve this goal by seamlessly integrating two new technologies, smart contract over blockchain and attested trusted execution environment (TEE). There are four key research thrusts in this project. The first thrust focuses on the design of an IoT data protection framework that coexists with the existing architecture at different layers of communication. The second research thrust aims to develop novel techniques to enable the confidential execution of contract function off-chain, by exploiting hardware-assisted TEE and its associated attestation technologies. The third thrust focuses on smart contract designs to effectively embed user-defined privacy policies and trustworthy tracking of data usage using the blockchain. The last thrusts integrates the aforementioned components to develop an open-source framework prototype.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

在物联网 (IoT) 即将到来的发展中，预计将有数十亿设备连接到互联网。虽然物联网有望打造一个更加互联、更加智能的世界，但这种普遍存在的大规模数据收集、存储、共享和分析引发了许多隐私问题。在当前的物联网生态系统中，物联网服务提供商完全控制所收集的用户数据。他们将这些数据用于智能物联网系统和设备控制。他们还可以将数据用于未经用户同意的其他目的。该项目提出了一种新颖的数据使用控制框架PrivacyGuard，旨在使数据所有者能够完全控制其敏感数据的使用方式，以保护数据免受某些类型的隐私泄露。 PrivacyGuard 确保用户数据只能由用户认可的程序使用，并且每次数据使用都有不可否认的使用记录。来自代表性不足的少数群体的学生将参与研究活动。拟议的 PrivacyGuard 框架旨在通过无缝集成区块链上的智能合约和经过验证的可信执行环境（TEE）这两种新技术来实现这一目标。该项目有四个关键研究方向。第一个重点是设计一个物联网数据保护框架，该框架与不同通信层的现有架构共存。第二个研究重点旨在开发新技术，通过利用硬件辅助 TEE 及其相关证明技术，实现链下合约功能的保密执行。第三个重点是智能合约设计，以有效地嵌入用户定义的隐私策略和使用区块链对数据使用进行可靠的跟踪。最后的推动力整合了上述组件，以开发一个开源框架原型。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

A Decentralized Truth Discovery Approach to the Blockchain Oracle Problem

• DOI: 10.1109/infocom53939.2023.10229019
• 发表时间: 2023-05
• 期刊: IEEE INFOCOM 2023 - IEEE Conference on Computer Communications
• 作者: Yang Xiao;Ning Zhang;W. Lou;Y. T. Hou

Challenges and New Directions in Securing Spectrum Access Systems

• DOI: 10.1109/jiot.2021.3064583
• 发表时间: 2021-04
• 期刊: IEEE Internet of Things Journal
• 影响因子: 10.6
• 作者: Shanghao Shi;Yang Xiao;Wenjing Lou;Chonggang Wang;Xu Li;Y. T. Hou;Jeffrey H. Reed

MS-PTP: Protecting Network Timing from Byzantine Attacks

MS-PTP：保护网络时序免受拜占庭攻击

• DOI: 10.1145/3558482.3590184
• 发表时间: 2023
• 期刊: WiSec '23: Proceedings of the 16th ACM Conference on Security and Privacy in Wireless and Mobile Networks
• 作者: Shi, Shanghao;Xiao, Yang;Du, Changlai;Shahriar, Md Hasan;Li, Ao;Zhang, Ning;Hou, Y. Thomas;Lou, Wenjing
• 通讯作者: Lou, Wenjing

MANDA: On Adversarial Example Detection for Network Intrusion Detection System

• DOI: 10.1109/tdsc.2022.3148990
• 发表时间: 2023-03
• 期刊: IEEE Transactions on Dependable and Secure Computing
• 影响因子: 7.3
• 作者: Ning Wang;Yimin Chen;Yang Xiao-;Yang Hu;W. Lou;Y. T. Hou

FeCo: Boosting Intrusion Detection Capability in IoT Networks via Contrastive Learning

• DOI: 10.1109/infocom48880.2022.9796926
• 发表时间: 2022-05
• 期刊: IEEE INFOCOM 2022 - IEEE Conference on Computer Communications
• 作者: Ning Wang;Yimin Chen;Yang Hu;W. Lou;Y. T. Hou