NSF Org:	CNS Division Of Computer and Network Systems
Recipient:	UNIVERSITY OF ILLINOIS
Initial Amendment Date:	August 15, 2016
Latest Amendment Date:	August 15, 2016
Award Number:	1646063
Award Instrument:	Standard Grant
Program Manager:	David Corman CNS  Division Of Computer and Network Systems CSE  Directorate for Computer and Information Science and Engineering
Start Date:	October 1, 2016
End Date:	November 30, 2018 (Estimated)
Total Intended Award Amount:	$240,000.00
Total Awarded Amount to Date:	$240,000.00
Funds Obligated to Date:	FY 2016 = $65,865.00
History of Investigator:	Stephen Checkoway (Principal Investigator) stephen.checkoway@oberlin.edu
Recipient Sponsored Research Office:	University of Illinois at Chicago 809 S MARSHFIELD AVE M/C 551 CHICAGO IL  US  60612-4305 (312)996-2862
Sponsor Congressional District:	07
Primary Place of Performance:	University of Illinois at Chicago 851 S Morgan ST MC 152 Chicago IL  US  60607-7053
Primary Place of Performance Congressional District:	07
Unique Entity Identifier (UEI):	W8XEAJDKMXH3
Parent UEI:
NSF Program(s):	CPS-Cyber-Physical Systems
Primary Program Source:	01001617DB NSF RESEARCH & RELATED ACTIVIT
Program Reference Code(s):	7918
Program Element Code(s):	791800
Award Agency Code:	4900
Fund Agency Code:	4900
Assistance Listing Number(s):	47.070

ABSTRACT

Factories, chemical plants, automobiles, and aircraft have come to be described today as cyber-physical systems of systems--distinct systems connected to form a larger and more complex system. For many such systems, correct operation is critical to safety, making their security of paramount importance. Unfortunately, because of their heterogeneous nature and special purpose, it is very difficult to determine whether a malicious attacker can make them behave in a manner that causes harm. This type of security analysis is an essential step in building and certifying secure systems.

Unfortunately, today's state of the art security analysis tools are tailored to the analysis of server, desktop, and mobile software. We currently lack the tools for analyzing the security of cyber physical systems of systems. The proposed work will develop new techniques for testing and analyzing security properties of such systems. These techniques will be used to build a new generation of tools that can handle the complexity of modern cyber-physical systems and thus make these critical systems more secure.The technical approach taken by the investigators is to applying proven dynamic analysis techniques, including dynamic information flow tracking and symbolic execution, to this problem. Existing tools, while powerful, are monolithic, designed to apply a single technique to a single system. Scaling them to multiple heterogeneous systems is the main contribution of the proposed work. To do so, the investigators will develop a common platform for cross-system dynamic analysis supporting arbitrary combinations of component execution modes (physical, simulated, and emulated), requiring new coordination mechanisms. Second, building on the platform above, they will implement cross-system dynamic information flow tracking, allowing dynamic information flow tracking across simulated, emulated, and potentially physical components. Third, they will extend existing symbolic/concrete execution techniques to execution across multiple heterogeneous systems. Fourth, they will introduce new ways of handling special-purpose hardware, a problem faced by dynamic analysis tools in general.

Please report errors in award information by writing to: awardsearch@nsf.gov.