CRII: CNS: Integrating Security Tasks into Multicore Real-Time Systems

CRII：CNS：将安全任务集成到多核实时系统中

• 批准号: 2152768
• 负责人: Monowar Hasan
• 金额: $ 17.5万
• 依托单位: Wichita State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-06-01 至 2023-01-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2152768&HistoricalAwards=false
• 关键词: CRII; CNS; Integrating; Security; Tasks

This award is funded in whole or in part under the American Rescue Plan Act of 2021 (Public Law 117-2).Many critical systems of modern society (e.g., engine control units in automobiles, logic controllers in manufacturing and power plants, aircraft control and navigation systems, industrial control systems, sensing and perception systems in robot-aided healthcare) have "real-time" (i.e., strict timing and safety) requirements. Emerging Internet-of-things-specific applications (e.g., connected autonomous cars, unmanned aerial vehicles), the trending use of off-the-shelf components, and widespread Internet/network connectivity expand the possibility of security breaches in those critical systems, as revealed by recent real-world attacks. The key innovation of this research is the development of a unified framework to integrate monitoring and detection mechanisms as first-class elements within the design of real-time systems, especially those built with multicore chips. This project will (a) devise novel algorithms, scheduling models, and frameworks to integrate security into multicore platforms that are cognizant of real-time requirements, (b) build design-time tools and system-level plugins to incorporate the proposed techniques into off-the-shelf systems, and (c) develop metrics to carefully trade-off two contending requirements: timeliness and security. The ideas will be validated through experimentation and testing on two off-the-shelf platforms: a multi-terrain rover and a six-degree-of-freedom robotic arm.This research will advance the field by enabling system designers to better understand how to integrate security concerns, with a focus on revealing security trade-offs to ensure minimal (or no) perturbations on real-time properties. Techniques developed as part of this project will make safety-critical, real-time systems more secure and applicable to various domains (e.g., automobiles, avionics, drones, space rovers, power grids, manufacturing plants, medical devices, industrial control systems). The proposed research and educational plans will enhance the knowledge of the next-generation technological workforce in cyber-physical systems and cyber-security. This award supports the training of graduate and undergraduate students, the development of a new security course at Wichita State University, and the integration of research findings into educational materials. All hardware, software, and system implementations (including documentation and tutorials) will be freely available in a public repository (https://github.com/CPS2RL) for educators, scientists, industry personnel, and hobbyists to access and use.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该奖项的全部或部分资金来源于《2021 年美国救援计划法案》（公法 117-2）。现代社会的许多关键系统（例如汽车中的发动机控制单元、制造和发电厂中的逻辑控制器、飞机控制）导航系统、工业控制系统、机器人辅助医疗保健中的传感和感知系统）都有“实时”（即严格的计时和安全）要求。新兴的物联网特定应用（例如，联网自动驾驶汽车、无人机）、现成组件的使用趋势以及广泛的互联网/网络连接扩大了这些关键系统中出现安全漏洞的可能性，例如最近的现实世界攻击揭示了这一点。这项研究的关键创新是开发一个统一的框架，将监控和检测机制集成为实时系统设计中的一流元素，特别是那些用多核芯片构建的系统。该项目将（a）设计新颖的算法、调度模型和框架，将安全性集成到了解实时要求的多核平台中，（b）构建设计时工具和系统级插件，将所提出的技术纳入关闭(c) 制定衡量标准来仔细权衡两个相互竞争的要求：及时性和安全性。这些想法将通过两个现成平台上的实验和测试得到验证：多地形漫游车和六自由度机械臂。这项研究将使系统设计人员更好地了解如何整合安全问题，重点是揭示安全权衡，以确保对实时属性的干扰最小（或没有）。作为该项目的一部分开发的技术将使安全关键的实时系统更加安全并适用于各个领域（例如汽车、航空电子设备、无人机、太空漫游器、电网、制造工厂、医疗设备、工业控制系统）。拟议的研究和教育计划将增强下一代技术劳动力在网络物理系统和网络安全方面的知识。该奖项支持研究生和本科生的培训、威奇托州立大学新安全课程的开发以及将研究成果纳入教育材料。所有硬件、软件和系统实现（包括文档和教程）都将在公共存储库（https://github.com/CPS2RL）中免费提供，供教育工作者、科学家、行业人员和爱好者访问和使用。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Real-Time Scheduling of TrustZone-enabled DNN Workloads

• DOI: 10.1145/3560826.3563386
• 发表时间: 2022-11
• 期刊: Proceedings of the 4th Workshop on CPS & IoT Security and Privacy
• 作者: Mohammad Fakhruddin Babar;M. Hasan

Secure Reboots for Real-Time Cyber-Physical Systems

实时网络物理系统的安全重启

• DOI: 10.1145/3560826.3563384
• 发表时间: 2022
• 期刊: Proceedings of the 4th Workshop on CPS & IoT Security and Privacy
• 作者: Banerjee, Vijay;Hounsinou, Sena;Olufowobi, Habeeb;Hasan, Monowar;Bloom, Gedare
• 通讯作者: Bloom, Gedare