ERI: Dynamic Wireless Channel Pad: A Lightweight and Effective Security Design Towards Non-cryptographic IoT Confidentiality

ERI：动态无线通道垫：面向非加密物联网机密性的轻量级且有效的安全设计

• 批准号: 2139028
• 负责人: Tao Wang
• 金额: $ 20万
• 依托单位: New Mexico State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-08-01 至 2024-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2139028&HistoricalAwards=false
• 关键词: ERI; Dynamic; Wireless; Channel; Pad

The variety and novelty of different IoT applications indeed improve the efficiency and service quality of our daily lives. But it also incurs on a range of security concerns. As IoT devices may gather geographical information, monitor users’ privacy activities, and record clients’ biometric features, one of the critical concerns is how to preserve the confidentiality of such sensitive-data traffic when IoT devices communicate with others. Specifically, due to the broadcast nature of wireless signals, conversations between IoT devices are vulnerable to eavesdropping attacks. This project aims to enforce security in devices that cannot afford cryptography operations. In particular, the project will develop a lightweight channel-aware security design that can deliver information securely and is suitable for implementation in resource-limited IoT devices. The scheme will be fined-grained and not protocol-oriented. It is potentially compatible with all existing wireless standards (e.g., WiFi 6, Zigbee, Bluetooth, 5G) and can accommodate diverse requirements of different wireless networks (e.g. cellular network, Wi-Fi network, satellite communication). In addition, the scheme developed will be useful beyond IoT applications. It can be deployed over any network featured with wireless connectivity, especially for those lacking key management infrastructures. In addition, the scheme can work together with cryptography algorithms on the application layer to provide cross-layer security guarantee. Beyond that, educational activities are an integral part of this project, the PI plans to share the outcomes of this project into his courses to motivate more students to get involved in cybersecurity research. The PI will also actively participate in outreach activities to increase the participation, activities, and engagement of students from diverse groups in the community.The goal of the project is to propose an effective and light-weight security design that takes advantage of dynamic signal variation in wireless context to protect sensitive network traffic emanating from IoT devices. The scheme can achieve information-theoretical security and is suitable for implementation in low-cost IoT devices where limited energy and circuitry can be dedicated for security. Specifically, the proposed scheme aims to exploit the inherited randomness feature of communication channels to achieve confidentiality of sensitive data without key distribution and management. In addition, the project plans to employ security design into relatively simple baseband processing procedures, which incur less overhead and only consume a very limited amount of resources. The project will focus on investigating important research problems associated with the proposed channel-aware security design using analytical modeling, comprehensive simulations, and experimental evaluations. In particular, the project aims to 1) identify practical issues towards the implementation of the proposed scheme and developing techniques that address the issues; 2) validate and refine the design via a thorough theoretical analysis and comprehensive simulations; and 3) build a practical wireless environment and systematically evaluate the effectiveness, efficiency, and reliability of the proposed design.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

不同物联网应用的多样性和新颖性确实提高了我们日常生活的效率和服务质量，但也带来了一系列安全问题，因为物联网设备可能会收集地理信息、监控用户的隐私活动并记录客户的生物特征。具体而言，由于无线信号的广播性质，物联网设备之间的对话很容易受到窃听攻击，其中一个关键问题是如何在物联网设备与其他设备通信时保护此类敏感数据流量的机密性。加强无法承担加密技术的设备的安全性特别是，该项目将开发一种轻量级的通道感知安全设计，可以安全地传递信息，并且适合在资源有限的物联网设备中实现，该方案将是细粒度的，并且具有潜在的兼容性。符合所有现有的无线标准（例如WiFi 6、Zigbee、蓝牙、5G），并且可以适应不同无线网络（例如蜂窝网络、Wi-Fi网络、卫星通信）的不同需求。此外，所开发的方案将具有超越的用途。物联网它可以部署在任何具有无线连接的网络上，特别是对于那些缺乏密钥管理基础设施的网络。此外，该方案可以与应用层的密码算法一起提供跨层的安全保证。作为该项目的一个组成部分，PI 计划将该项目的成果分享到他的课程中，以激励更多的学生参与网络安全研究。PI 还将积极参与外展活动，以增加参与度、活动度和参与度。来自社区不同群体的学生。该项目的目标旨在提出一种有效且轻量级的安全设计，利用无线环境中的动态信号变化来保护来自物联网设备的敏感网络流量，该方案可以实现信息论安全，并且适合在低成本物联网设备中实现。具体来说，该方案旨在利用通信信道继承的随机性特征来实现敏感数据的机密性，而无需密钥分发和管理。此外，该项目计划将安全设计应用于相对的领域。简单的基带处理过程，产生的开销更少，仅消耗非常有限的资源。该项目将重点研究与使用分析建模、综合模拟和实验评估所提出的通道感知安全设计相关的重要研究问题。 2) 通过彻底的理论分析和全面的仿真来验证和完善设计；3) 构建实用的无线环境并系统地评估所提出设计的有效性、效率和可靠性。该奖项反映了 NSF 的成就法定使命，并通过使用基金会的智力优点和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

DyWCP: Dynamic and Lightweight Data-Channel Coupling towards Confidentiality in IoT Security

• DOI: 10.1145/3507657.3528550
• 发表时间: 2022-05
• 期刊: Proceedings of the 15th ACM Conference on Security and Privacy in Wireless and Mobile Networks
• 作者: Shengping Bi;Tao Hou;Tao Wang;Yao-Hong Liu;Zhuo Lu;Qingqi Pei

Exquisite Feature Selection for Machine Learning Powered Probing Attack Detection

• DOI: 10.1109/icc45041.2023.10278886
• 发表时间: 2023-05
• 期刊: ICC 2023 - IEEE International Conference on Communications
• 作者: Hamidah Alanazi;Shengping Bi;Tao Wang;Tao Hou