ERI: Dynamic Wireless Channel Pad: A Lightweight and Effective Security Design Towards Non-cryptographic IoT Confidentiality

ERI：动态无线通道垫：面向非加密物联网机密性的轻量级且有效的安全设计

• 批准号: 2139028
• 负责人: Tao Wang
• 金额: $ 20万
• 依托单位: New Mexico State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-08-01 至 2024-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2139028&HistoricalAwards=false
• 关键词: ERI; Dynamic; Wireless; Channel; Pad

The variety and novelty of different IoT applications indeed improve the efficiency and service quality of our daily lives. But it also incurs on a range of security concerns. As IoT devices may gather geographical information, monitor users’ privacy activities, and record clients’ biometric features, one of the critical concerns is how to preserve the confidentiality of such sensitive-data traffic when IoT devices communicate with others. Specifically, due to the broadcast nature of wireless signals, conversations between IoT devices are vulnerable to eavesdropping attacks. This project aims to enforce security in devices that cannot afford cryptography operations. In particular, the project will develop a lightweight channel-aware security design that can deliver information securely and is suitable for implementation in resource-limited IoT devices. The scheme will be fined-grained and not protocol-oriented. It is potentially compatible with all existing wireless standards (e.g., WiFi 6, Zigbee, Bluetooth, 5G) and can accommodate diverse requirements of different wireless networks (e.g. cellular network, Wi-Fi network, satellite communication). In addition, the scheme developed will be useful beyond IoT applications. It can be deployed over any network featured with wireless connectivity, especially for those lacking key management infrastructures. In addition, the scheme can work together with cryptography algorithms on the application layer to provide cross-layer security guarantee. Beyond that, educational activities are an integral part of this project, the PI plans to share the outcomes of this project into his courses to motivate more students to get involved in cybersecurity research. The PI will also actively participate in outreach activities to increase the participation, activities, and engagement of students from diverse groups in the community.The goal of the project is to propose an effective and light-weight security design that takes advantage of dynamic signal variation in wireless context to protect sensitive network traffic emanating from IoT devices. The scheme can achieve information-theoretical security and is suitable for implementation in low-cost IoT devices where limited energy and circuitry can be dedicated for security. Specifically, the proposed scheme aims to exploit the inherited randomness feature of communication channels to achieve confidentiality of sensitive data without key distribution and management. In addition, the project plans to employ security design into relatively simple baseband processing procedures, which incur less overhead and only consume a very limited amount of resources. The project will focus on investigating important research problems associated with the proposed channel-aware security design using analytical modeling, comprehensive simulations, and experimental evaluations. In particular, the project aims to 1) identify practical issues towards the implementation of the proposed scheme and developing techniques that address the issues; 2) validate and refine the design via a thorough theoretical analysis and comprehensive simulations; and 3) build a practical wireless environment and systematically evaluate the effectiveness, efficiency, and reliability of the proposed design.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

不同物联网应用的多样性和新颖性确实提高了我们日常生活的效率和服务质量。但这也引起了一系列安全问题。由于物联网设备可能会收集地理信息，监控用户的隐私活动并记录客户的生物特征特征，因此关键问题之一是当物联网设备与他人通信时，如何保持这种敏感数据流量的机密性。具体而言，由于无线信号的广播性质，物联网设备之间的对话很容易受到窃听攻击的影响。该项目旨在在无法负担无信任操作的设备中执行安全性。特别是，该项目将开发轻巧的频道安全设计，该设计可以安全地提供信息，并且适合在资源有限的IoT设备中实现。该方案将是建立元素的，而不是面向协议的。它可能与所有现有的无线标准（例如WiFi 6，Zigbee，蓝牙，5G）兼容，并且可以适应不同无线网络的潜水员要求（例如蜂窝网络，Wi-Fi网络，卫星通信）。此外，开发的计划将在物联网应用程序之外有用。它可以通过无线连接性的任何网络部署，尤其是对于缺乏关键管理基础架构的人。此外，该方案可以与应用程序层上的加密算法一起使用，以提供跨层安全保证。除此之外，教育活动是该项目不可或缺的一部分，PI计划将该项目的成果分享到他的课程中，以激励更多的学生参与网络安全研究。 PI还将积极参与外展活动，以增加社区中潜水员团体的学生的参与，活动和参与。该项目的目的是提出一种有效且轻巧的安全设计，利用无线上下文中的动态信号变化，以保护敏感网络流量，以保护从IOT设备中散发出的敏感网络。该方案可以实现信息理论安全性，适合在低成本的物联网设备中实施，在该设备中，可以将有限的能量和电路用于安全性。具体而言，提出的计划旨在利用通信渠道的继承随机性特征，以实现敏感数据的机密性，而无需密钥分布和管理。此外，该项目计划将安全设计用于相对简单的基带处理程序，该程序少造成的开销较少，并且仅消耗了非常有限的资源。该项目将着重于研究与提议的渠道感知安全设计相关的重要研究问题，并使用分析建模，综合模拟和实验评估。特别是，该项目的目的是1）确定实际问题2）通过彻底的理论分析和全面的模拟来验证和完善设计； 3）建立实用的无线环境，并系统地评估拟议设计的有效性，有效性和可靠性。该奖项反映了NSF的法定任务，并使用基金会的知识分子优点和更广泛的影响审查标准，通过评估被认为是宝贵的支持。

项目成果

DyWCP: Dynamic and Lightweight Data-Channel Coupling towards Confidentiality in IoT Security

• DOI: 10.1145/3507657.3528550
• 发表时间: 2022-05
• 期刊: Proceedings of the 15th ACM Conference on Security and Privacy in Wireless and Mobile Networks
• 作者: Shengping Bi;Tao Hou;Tao Wang;Yao-Hong Liu;Zhuo Lu;Qingqi Pei

Exquisite Feature Selection for Machine Learning Powered Probing Attack Detection

• DOI: 10.1109/icc45041.2023.10278886
• 发表时间: 2023-05
• 期刊: ICC 2023 - IEEE International Conference on Communications
• 作者: Hamidah Alanazi;Shengping Bi;Tao Wang;Tao Hou