Collaborative Research: CPS: Medium: Timeliness vs. Trustworthiness: Balancing Predictability and Security in Time-Sensitive CPS Design.

协作研究：CPS：中：及时性与可信度：在时间敏感的 CPS 设计中平衡可预测性和安全性。

• 批准号: 2230969
• 负责人: Cong Liu
• 金额: $ 23.99万
• 依托单位: University of California-Riverside
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-07-01 至 2025-01-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2230969&HistoricalAwards=false
• 关键词: Collaborative; Research; CPS; Medium; Timeliness; Collaborative; Research; CPS; Medium; Timeliness

Many cyber-physical systems (CPS) have real-time (RT) requirements. For these RT-CPS, such as a network of unmanned aerial vehicles that deliver packages to customers’ homes or a robot that performs/aides in cardiac surgery, deadline misses may result in economic losses or even fatal consequences. At the same time, as these RT-CPS interact with, and are depended on by, humans, they must also be trustworthy. The goal of this research is to design secure RT-CPS that are less complex, easier to analyze, and reliable for critical application domains such as defense, medicine, transportation, manufacturing, and agriculture, to name just a few. Since RT-CPS now permeate most aspects of our daily lives, especially in the smart city and internet-of-things (IoT) context, this research will improve confidence in automated systems by users. Research results will be disseminated to both academia and industry, and permit timely adoption since the hardware required in this research is already publicly available. This project will result in a pipeline of engineers and computer scientists who are well-versed in the interdisciplinary nature of securing RT-CPS, as well as course modules and red-teaming exercises for undergraduate students in all engineering disciplines and interactive learning modules and internship experience for K-12 students in D.C., Detroit, Dallas, and St. Louis.The goal of this research is to design secure RT-CPS from the ground up while explicitly accounting for physical dynamics of said RT-CPS at runtime to achieve resilience via prevention and detection of, and recovery from, attacks. This will be accomplished by (i) securing the scheduling infrastructure from the ground up, (ii) using a formal framework for trading off security against timeliness while accounting for system dynamics, and for the cost of security to be explicitly quantified, and (iii) performing state- and function-dependent on-demand recovery. Said RT-CPS will be able to proactively prevent attacks using moving target defenses, as well as detect and recover from attacks that cannot be avoided. This research will pave the way for RT-CPS and internet-of-things (IoT) to be implemented with confidence: their timely and correct operation guaranteed. Specific contributions of this research are: (i) a trusted scheduling infrastructure that can protect the integrity of the real-time tasks, the scheduler, its task queues, and I/O, and which can recover from (intentional) errors, (ii) a probabilistic real-time/security co-design framework that exploits trusted execution to protect the security of the real-time tasks, (iii) novel schedulability analysis techniques, (iv) an incremental recovery mechanism for continuous operation, and (v) validation on automated ground vehicles, drones, and robot arms. Contributions expanding the knowledge base will be made to the fields of CPS, IoT, real-time systems, security, and control systems.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

许多网络物理系统（CPS）有实时（RT）要求。对于这些RT-CP，例如无人驾驶汽车网络，该网络将包裹运送到客户的房屋或在心脏手术中执行/助手的机器人，截止日期可能会导致经济损失甚至致命的后果。同时，由于这些RT-CPS与人类的互动并依赖于人类，它们也必须值得信赖。这项研究的目的是设计安全的RT-CP，这些安全性RT-CP不那么复杂，更易于分析，并且对于诸如国防，医学，运输，制造和同意等关键应用领域的可靠性，仅举几例。由于RT-CPS现在渗透到我们日常生活的大多数方面，尤其是在智慧城市和贸易Internet（IoT）环境中，因此这项研究将提高用户对自动化系统的信心。研究结果将被传播到学术界和行业，并允许及时采用，因为本研究中所需的硬件已经公开。该项目将导致工程师和计算机科学家的渠道，这些工程师和计算机科学家都以跨学科的性质进行了良好的保护，并为所有工程学科中的本科生和互动学习模块的本科生和互动学习模块和互动学习模块和国际实习生的经验以及D.C.的K-12学生提供了底特律，Dallas和St. Louis-c。明确考虑到运行时上述RT-CP的物理动态，以通过预防和检测和从攻击中恢复来实现弹性。这将是通过（i）从头开始确保调度基础架构的实现，（ii）使用正式框架在考虑到系统动力学的同时对及时性进行交易，并明确量化安全性成本，以及（iii）执行状态和功能依赖于国家和功能依赖于功能的恢复。所述RT-CPS将能够使用移动目标防御措施积极预防攻击，并从无法避免的攻击中检测和恢复。这项研究将为RT-CPS和Things Internet（IoT）充满信心地铺平道路：及时，正确的操作保证。这项研究的具体贡献是：（i）可信赖的计划基础架构，可以保护实时任务的完整性，调度程序，其任务等级和I/O，并且可以从（故意）错误中恢复过来，（ii）利用可信赖的实时执行以保护实时任务（II III）的实时执行（II）（ii）实时的安全性计划（II）（ii）实时任务（II）（II）（II）（II） （iv）用于连续操作的增量恢复机制，以及（v）对自动地面车辆，无人机和机器人臂的验证。扩大知识库的贡献将以CPS，IoT，实时系统，安全性和控制系统的领域作出。该奖项反映了NSF的法定任务，并使用基金会的知识分子优点和更广泛的影响审查标准，通过评估来诚实地认为通过评估。