Context Aware and Extendable Mobile Security Mechanisms

上下文感知和可扩展的移动安全机制

• 批准号: RGPIN-2017-05422
• 负责人: Talhi, Chamseddine
• 金额: $ 1.68万
• 依托单位: École de technologie supérieure
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2017
• 资助国家: 加拿大
• 起止时间: 2017-01-01 至 2018-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=634624
• 关键词: Context; Aware; Extendable; Mobile; Security

Thanks to the proliferation of ubiquitous devices as well as the wide adoption of virtualization, the ICT industry is more relying on small and limited-resources devices supported by virtualized services. This trend is challenging security solutions architects because of the high mobility of devices and the continuous changing of their execution context, especially the fluctuation of available computation resources. Consequently, there is an urgent need for novel context-aware, adaptable and fine-grained security enforcement solutions. If these solutions are enough optimised and fine-grained, they can benefit from the recent progress in software deployment and shipment technologies. We believe that it is time to rethink the design of security solutions towards a novel generation of enforcement mechanisms that are autonomous, context-aware, and extendable. These mechanisms should be able to (a) survive the starvation of resources and fluctuation of resource availability, (b) be context-aware in order to choose the best enforcement actions, and (c) be offloaded (shipped) where more resources are available in order to collaborate with nearby devices or remote infrastructure towards the achievement of security objectives.

由于无处不在的设备的激增以及虚拟化的广泛采用，ICT行业更加依赖虚拟化服务支持的小型且资源有限的设备。由于设备的高移动性及其执行上下文的不断变化，尤其是可用计算资源的波动，这种趋势对安全解决方案架构师提出了挑战。因此，迫切需要新颖的上下文感知、适应性强和细粒度的安全实施解决方案。如果这些解决方案足够优化和细粒度，它们可以从软件部署和运输技术的最新进展中受益。我们认为，现在是时候重新考虑安全解决方案的设计，以实现新一代自主、上下文感知和可扩展的执行机制。这些机制应该能够（a）经受住资源匮乏和资源可用性波动的影响，（b）具有上下文感知能力，以便选择最佳的执行行动，以及（c）在有更多可用资源的情况下卸载（运送）为了与附近的设备或远程基础设施协作以实现安全目标。