Collaborative Research: PPoSS: Planning:S3-IoT: Design and Deployment of Scalable, Secure, and Smart Mission-Critical IoT Systems

协作研究：PPoSS：规划：S3-IoT：可扩展、安全和智能任务关键型物联网系统的设计和部署

• 批准号: 2028740
• 负责人: Fanxin Kong
• 金额: $ 5万
• 依托单位: Syracuse University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2020
• 资助国家: 美国
• 起止时间: 2020-10-01 至 2022-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2028740&HistoricalAwards=false
• 关键词: Collaborative; Research; PPoSS; Planning; S3

The growing capabilities of sensing, computing and communication devices are leading to an explosion of Internet of Things (IoT) infrastructures. In the meantime, advances in technologies such as autonomous systems and artificial intelligence promise enormous economic and societal benefits. Naturally, it is desirable to deploy these technologies in IoT infrastructures. However, such deployments present daunting changes for increasingly scaled-up IoT infrastructures in mission-critical applications such as medical, energy, transportation, and industrial-automation systems. These challenges stem from several major aspects in terms of scalability. First, the number of edge devices can be enormous, often in the order of billions, which makes centralized management infeasible. Second, there are multiple layers of heterogeneity. An IoT system can consist of heterogeneous computing subsystems; each subsystem can have heterogeneous computing devices; and each single device can be composed of different kinds of computing components. Third, mission-critical applications have stringent requirements in correctness, resilience, timeliness, security and safety. It is difficult for a large-scale IoT system to satisfy these requirements due to increasing opportunities for adversarial activity.To tackle these challenges, this project aims to develop a cross-layer and full hardware/software stack solution, referred to as the S3-IoT framework, for the design and deployment of scalable, secure, and smart mission-critical IoT systems. The S3-IoT framework will span three different computation layers, including data centers, gateways/aggregators, and edge devices, and cover four research foci, i.e., resource management, security and privacy, computer architecture/systems, and algorithms. In this planning project, an initial version of the S3-IoT framework will be developed. The S3-IoT framework will (i) leverage a layered structure - data centers, gateways/aggregators, and edge devices to accommodate the huge number of edge devices; (ii) develop cross-layer techniques to deal with the heterogeneity among these layers; and (iii) propose hardware and software co-design approaches that embrace the heterogeneity among computing components to improve the performance of all components within an individual layer. The S3-IoT framework will be evaluated by developing simulators with the layered structure as well as a small scale, comprehensive experimental testbed. The success of this planning project will lead to a convincing path to effective deployment of mission-critical IoT systems and infrastructures, particularly in terms of improving resilience to environmental uncertainties, system internal errors and faults, and malicious attacks.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

感应，计算和通信设备的日益增长的功能导致物联网（IoT）基础架构的爆炸。同时，自主系统和人工智能等技术的进步有望巨大的经济和社会利益。自然，希望将这些技术部署在物联网基础架构中。但是，此类部署对关键任务应用程序（例如医疗，能源，运输和工业自动化系统）中越来越大的IoT基础设施的艰巨变化进行了艰巨的变化。这些挑战源于可扩展性的几个主要方面。首先，边缘设备的数量通常按数十亿美元的顺序，这使集中管理不可行。其次，有多个异质性。物联网系统可以由异质计算子系统组成；每个子系统都可以具有异质计算设备。并且每个设备都可以由不同种类的计算组件组成。第三，关键任务申请在正确性，弹性，及时性，安全性和安全性方面有严格的要求。大规模的物联网系统很难满足这些要求，这是由于增加的对抗性活动的机会。要应对这些挑战，该项目旨在开发跨层和完整的硬件/软件堆栈解决方案，即S3-iot框架，称为S3-iot框架，用于用于设计和部署可扩展，安全和智能的Mission-Mission-Critical-Cricials-Cricials-Cricials-Criginal-timalsigal-Criginal-Iot系统。 S3-iot框架将跨越三个不同的计算层，包括数据中心，网关/聚合器和边缘设备，并涵盖四个研究焦点，即资源管理，安全性和隐私，计算机体系结构/系统和算法。在此计划项目中，将开发S3-Iot框架的初始版本。 S3 -iot框架（i）将利用分层结构 - 数据中心，网关/聚合器和边缘设备来容纳大量的边缘设备； （ii）开发跨层技术来处理这些层之间的异质性； （iii）提出了硬件和软件共同设计方法，该方法包含计算组件之间的异质性，以提高单个层中所有组件的性能。 S3-Iot框架将通过开发具有分层结构的模拟器以及小规模的全面实验测试床来评估。该计划项目的成功将导致有效部署关键任务的物联网系统和基础架构的令人信服的途径，尤其是在提高对环境不确定性的韧性，系统内部错误和故障以及恶意攻击方面，这奖反映了NSF的法定任务，并通过评估基金会的智力效果和广泛的范围来进行评估。

项目成果

Real-time Attack-recovery for Cyber-physical Systems Using Linear-quadratic Regulator

• DOI: 10.1145/3477010
• 发表时间: 2021-09
• 期刊: ACM Transactions on Embedded Computing Systems (TECS)
• 作者: Lin Zhang;Pengyuan Lu;Fanxin Kong;Xin Chen;O. Sokolsky;Insup Lee

Adaptive window-based sensor attack detection for cyber-physical systems

• DOI: 10.1145/3489517.3530555
• 发表时间: 2022-07
• 期刊: Proceedings of the 59th ACM/IEEE Design Automation Conference
• 作者: Lin Zhang;Zifan Wang;Mengyu Liu;Fanxin Kong

Real-Time Adaptive Sensor Attack Detection in Autonomous Cyber-Physical Systems

自主网络物理系统中的实时自适应传感器攻击检测

• DOI: 10.1109/rtas52030.2021.00027
• 发表时间: 2021
• 期刊: 2021 IEEE 27th Real-Time and Embedded Technology and Applications Symposium (RTAS
• 作者: Akowuah, Francis;Kong, Fanxin
• 通讯作者: Kong, Fanxin

Real-Time Attack-Recovery for Cyber-Physical Systems Using Linear Approximations

• DOI: 10.1109/rtss49844.2020.00028
• 发表时间: 2020-12
• 期刊: 2020 IEEE Real-Time Systems Symposium (RTSS)
• 作者: Lin Zhang;Xin Chen;Fanxin Kong;A. Cárdenas

Physical Invariant Based Attack Detection for Autonomous Vehicles: Survey, Vision, and Challenges

基于物理不变性的自动驾驶汽车攻击检测：调查、愿景和挑战

• DOI: 10.1109/metrocad51599.2021.00014
• 发表时间: 2021
• 期刊: 2021 Fourth International Conference on Connected and Autonomous Driving (MetroCAD
• 作者: Akowuah, Francis;Kong, Fanxin
• 通讯作者: Kong, Fanxin