Publications

Refine Results

(Filters Applied) Clear All

Security considerations for next-generation operating systems for cyber-physical systems

April 15, 2019
  |
Conference Paper
Author:
Bryan Ward
…
Published in:
1st Intl. Workshop on Next-Generation Operating Systems for Cyber-Physical Systems, NGOSCPS, 15 April 2019.
Topic:
cyber security
R&D area:
R&D group:

Summary

Cyber-physical systems (CPSs) are increasingly targeted in high-profile cyber attacks. Examples of such attacks include Stuxnet, which targeted nuclear centrifuges; Crashoverride, and Triton, which targeted power grids; and the Mirai botnet, which targeted internet-of-things (IoT) devices such as cameras to carry out a large-scale distributed denial-of-service (DDoS) attack. Such attacks demonstrate the importance of securing current and future cyber-physical systems. Therefore, next-generation operating systems (OSes) for CPS need to be designed to provide security features necessary, as well as be secure in and of themselves. CPSs are designed with one of three broad classes of OSes: (a) bare-metal applications with effectively no operating system, (b) embedded systems executing on impoverished platforms running an embedded or real-time operating system (RTOS) such as FreeRTOS, or (c) more performant platforms running general purpose OSes such as Linux, sometimes tuned for real-time performance such as through the PREEMPT_RT patch. In cases (a) and (b), the OS, if any, is very minimal to facilitate improved resource utilization in real-time or latency-sensitive applications, especially running on impoverished hardware platforms. In such OSes, security is often overlooked, and many important security features (e.g. process/kernel memory isolation) are notably absent. In case (c), the general-purpose OS inherits many of the security-related features that are critical in enterprise and general-purpose applications, such as virtual memory and address-space layout randomization (ASLR). However, the highly complex nature of general-purpose OSes can be problematic in the development of CPSs, as they are highly non-deterministic and difficult to formally reason about for cyber-physical applications, which often have real-time constraints. These issues motivate the need for a next generation OS that is highly capable, predictable and deterministic for real-time performance, but also secure in the face of many of the next generation of cyber threats. In order to design such a next-generation OS, it is necessary to first reflect on the types of threats that CPSs face, including the attacker intentions and types of effects that can be achieved, as well as the type of access that attackers have. While threat models are not the same for all CPSs, it is important to understand how the threat models for CPSs compare to general-purpose or enterprise computing environments. We discuss these issues next (Sec. 2), before providing insights and recommendations for approaches to incorporate in next-generation OSes for CPS in Sec. 3.
READ LESS

Summary

Cyber-physical systems (CPSs) are increasingly targeted in high-profile cyber attacks. Examples of such attacks include Stuxnet, which targeted nuclear centrifuges; Crashoverride, and Triton, which targeted power grids; and the Mirai botnet, which targeted internet-of-things (IoT) devices such as cameras to carry out a large-scale distributed denial-of-service (DDoS) attack. Such attacks...

READ MORE
Security considerations for next-generation operating systems for cyber-physical systems

CW radar operation in the focused near-field

April 14, 2019
  |
Conference Paper
Author:
Kristan A. Tuttle
…
Published in:
2019 Intl. Applied Computational Electromagnetics Society Symp., ACES, 14-19 April 2019.
Topic:
antennas
R&D area:
R&D group:

Summary

In this paper we will show by computer simulation and by measurements that the horn antennas of a bi-static radar operating in the near-field have a distinct maximum at a non-zero range. By focusing the antennas on this hot spot a low-powered, continuous-wave Ku-band radar could detect flying mosquitoes at very short range.
READ LESS

Summary

In this paper we will show by computer simulation and by measurements that the horn antennas of a bi-static radar operating in the near-field have a distinct maximum at a non-zero range. By focusing the antennas on this hot spot a low-powered, continuous-wave Ku-band radar could detect flying mosquitoes at...

READ MORE
CW radar operation in the focused near-field

HARDEN: A high assurance design environment

March 25, 2019
  |
Conference Paper
Author:
Haley R. Whitman
…
Published in:
GOMACTech 2019, 25-28 March 2019.
Topic:
resilient systems
R&D area:
R&D group:

Summary

Systems resilient to cyber-attacks for mission assurance are difficult to develop, and the means of effectively evaluating them is even harder. We have developed a new architectural design and engineering environment, referred to as HARDEN (High AssuRance Design ENvironment), which supports an agile design methodology used to create secure and resilient systems. This new toolkit facilitates the quantitative analysis of a system's security posture by setting up a systematic approach of securing and analyzing embedded systems. HARDEN promotes the early co-design of functionality and security that now enables the development of mission assured systems.
READ LESS

Summary

Systems resilient to cyber-attacks for mission assurance are difficult to develop, and the means of effectively evaluating them is even harder. We have developed a new architectural design and engineering environment, referred to as HARDEN (High AssuRance Design ENvironment), which supports an agile design methodology used to create secure and...

READ MORE
HARDEN: A high assurance design environment

Design and analysis framework for trusted and assured microelectronics

March 25, 2019
  |
Conference Paper
Author:
Aaron J. Mills
…
Published in:
GOMACTech 2019, 25-28 March 2019.
Topic:
microelectronics
R&D area:
R&D group:

Summary

An in-depth understanding of microelectronics assurance in Department of Defense (DoD) missions is increasingly important as the DoD continues to address supply chain challenges. Many studies take a "bottom-up" approach, in which vulnerabilities are assessed in terms of general-purpose usage. This is beneficial in developing a general knowledge foundation. However, it does not offer much insight for program managers, technical leads, etc. to determine, for a specific mission and operating environment, the risks and requirements to using a microelectronic device. It is critical to develop a systematic approach that considers mission objectives, as the same component could be used in a weapon system or a surveillance system with significantly different requirements. We have been developing a Trusted and Assured Microelectronics (T&AM) Framework, which considers the entire system life cycle to produce mission-specific metrics and assessments. A radar system exemplar illustrates the approach and how the metric can be used as a Figure of Merit for quantitative analysis during development.
READ LESS

Summary

An in-depth understanding of microelectronics assurance in Department of Defense (DoD) missions is increasingly important as the DoD continues to address supply chain challenges. Many studies take a "bottom-up" approach, in which vulnerabilities are assessed in terms of general-purpose usage. This is beneficial in developing a general knowledge foundation. However...

READ MORE
Design and analysis framework for trusted and assured microelectronics

Understanding Mission-Driven Resiliency Workshop

March 18, 2019
  |
Conference Paper
Author:
Jeremy L. Mineweaser
…
Published in:
Lincoln Laboratory
Topic:
resilient systems
R&D area:
R&D group:

Summary

MIT Lincoln Laboratory hosted an invitation-only, one-day interdisciplinary workshop entitled
“Understanding Mission-Driven Resiliency” on behalf of the US Air Force, on March 18, 2019 at MIT
Lincoln Laboratory Beaver Works in Cambridge, MA. Participants began to bridge the gap between
government and industry to improve the resiliency of government systems to cyber attacks. The
workshop focused on understanding and defining resiliency from different perspectives and included
five panels devoted to discussing how different industries view and manage resiliency within their
organizations, the sources of resiliency within organizations and software-intensive systems, measuring
resiliency, and building resiliency within an organization or technology stack.
READ LESS

Summary

MIT Lincoln Laboratory hosted an invitation-only, one-day interdisciplinary workshop entitled
“Understanding Mission-Driven Resiliency” on behalf of the US Air Force, on March 18, 2019 at MIT
Lincoln Laboratory Beaver Works in Cambridge, MA. Participants began to bridge the gap between
government and industry to improve the resiliency of government systems...

READ MORE
Understanding Mission-Driven Resiliency Workshop

Discovering the smallest observed near-earth objects with the space surveillance telescope

February 26, 2019
  |
Journal Article
Author:
Arthur Lue
…
Published in:
Icarus, Vol. 325, 2019, pp. 105-114.
Topic:
asteroids
R&D area:
R&D group:

Summary

The Space Surveillance Telescope (SST) is an advanced optical sensor designed and tested by MIT Lincoln Laboratory for the Defense Advanced Research Projects Agency (DARPA), which is currently in the process of being integrated into the Space Surveillance Network. By operating the telescope in a manner normally intended for the discovery of small, artificial space objects, SST is serendipitously sensitive to the detection of very small asteroids as they traverse close to the Earth, passing rapidly through SST's search volume. This mode of operation stands in contrast to the standard approach for the search and discovery of asteroids and near-Earth objects (NEOs), in which longer revisit times restrict survey sensitivities to objects moving no faster than about 20 degrees/day. From data collected during SST's observation runs in New Mexico, we detail the discovery of 92 new candidate objects in heliocentric orbit whose absolute magnitudes range from H=26.4 to 35.9 (approximately 18-m to 25-cm in size). Some of these discoveries represent the smallest natural objects ever observed in orbit. We compare the candidate objects with bolide observations.
READ LESS

Summary

The Space Surveillance Telescope (SST) is an advanced optical sensor designed and tested by MIT Lincoln Laboratory for the Defense Advanced Research Projects Agency (DARPA), which is currently in the process of being integrated into the Space Surveillance Network. By operating the telescope in a manner normally intended for the...

READ MORE
Discovering the smallest observed near-earth objects with the space surveillance telescope

Weather radar network benefit model for tornadoes

February 21, 2019
  |
Journal Article
Author:
John Y. Cho
…
Published in:
J. Appl. Meteor. Climatol., 22 April 2019, doi:10.1175/JAMC-D-18-0205.1.
Topic:
radar
R&D area:
R&D group:

Summary

A monetized tornado benefit model is developed for arbitrary weather radar network configurations. Geospatial regression analyses indicate that improvement of two key radar parameters--fraction of vertical space observed and cross-range horizontal resolution--lead to better tornado warning performance as characterized by tornado detection probability and false alarm ratio. Previous experimental results showing faster volume scan rates yielding greater warning performance are also incorporated into the model. Enhanced tornado warning performance, in turn, reduces casualty rates. In addition, lower false alarm ratios save cost by cutting down on work and personal time lost while taking shelter. The model is run on the existing contiguous United States weather radar network as well as hypothetical future configurations. Results show that the current radars provide a tornado-based benefit of ~$490M per year. The remaining benefit pool is about $260M per year that is roughly split evenly between coverage- and rapid-scanning-related gaps.
READ LESS

Summary

A monetized tornado benefit model is developed for arbitrary weather radar network configurations. Geospatial regression analyses indicate that improvement of two key radar parameters--fraction of vertical space observed and cross-range horizontal resolution--lead to better tornado warning performance as characterized by tornado detection probability and false alarm ratio. Previous experimental results...

READ MORE
Weather radar network benefit model for tornadoes

FastDAWG: improving data migration in the BigDAWG polystore system

February 21, 2019
  |
Conference Paper
Author:
Xiangyao Yu
…
Published in:
Poly 2018/DMAH 2018, LNCS 11470, 2019, pp. 3–15.
Topic:
supercomputing
R&D area:
R&D group:

Summary

The problem of data integration has been around for decades, yet a satisfactory solution has not yet emerged. A new type of system called a polystore has surfaced to partially address the integration problem. Based on experience with our own polystore called Big-DAWG, we identify three major roadblocks to an acceptable commercial solution. We offer a new architecture inspired by these three problems that trades some generality for usability. This architecture also exploits modern hardware (i.e., high-speed networks and RDMA) to gain performance. The paper concludes with some promising experimental results.
READ LESS

Summary

The problem of data integration has been around for decades, yet a satisfactory solution has not yet emerged. A new type of system called a polystore has surfaced to partially address the integration problem. Based on experience with our own polystore called Big-DAWG, we identify three major roadblocks to an...

READ MORE
FastDAWG: improving data migration in the BigDAWG polystore system

Scaling big data platform for big data pipeline

February 11, 2019
  |
Abstract
Author:
Rebecca L. Wild
…
Published in:
Submitted to Northeast Database Day, NEBD 2020, https://arxiv.org/abs/1902.03948
Topic:
high performance computing
R&D area:
R&D group:

Summary

Monitoring and Managing High Performance Computing (HPC) systems and environments generate an ever growing amount of data. Making sense of this data and generating a platform where the data can be visualized for system administrators and management to proactively identify system failures or understand the state of the system requires the platform to be as efficient and scalable as the underlying database tools used to store and analyze the data. In this paper we will show how we leverage Accumulo, d4m, and Unity to generate a 3D visualization platform to monitor and manage the Lincoln Laboratory Supercomputer systems and how we have had to retool our approach to scale with our systems.
READ LESS

Summary

Monitoring and Managing High Performance Computing (HPC) systems and environments generate an ever growing amount of data. Making sense of this data and generating a platform where the data can be visualized for system administrators and management to proactively identify system failures or understand the state of the system requires...

READ MORE
Scaling big data platform for big data pipeline

Guidelines for secure small satellite design and implementation: FY18 Cyber Security Line-Supported Program

February 6, 2019
  |
Project Report
Author:
Kyle W. Ingols
…
Published in:
MIT Lincoln Laboratory Report LSP-249
Topic:
satellites
R&D area:
R&D group:

Summary

We are on the cusp of a computational renaissance in space, and we should not bring past terrestrial missteps along. Commercial off-the-shelf (COTS) processors -- much more powerful than traditional rad-hard devices -- are increasingly used in a variety of low-altitude, short-duration CubeSat class missions. With this new-found headroom, the incessant drumbeat of "faster, cheaper, faster, cheaper" leads a familiar march towards Linux and a menagerie of existing software packages, each more bloated and challenging to secure than the last. Lincoln Laboratory has started a pilot effort to design and prototype an exemplar secure satellite processing platform, initially geared toward CubeSats but with a clear path to larger missions and future high performance rad-hard processors. The goal is to provide engineers a secure "grab-and-go" architecture that doesn't unduly hamstring aggressive build timelines yet still provides a foundation of security that can serve adopting systems well, as well as future systems derived from them. This document lays out the problem space for cybersecurity in this domain, derives design guidelines for future secure space systems, proposes an exemplar architecture that implements the guidelines, and provides a solid starting point for near-term and future satellite processing.
READ LESS

Summary

We are on the cusp of a computational renaissance in space, and we should not bring past terrestrial missteps along. Commercial off-the-shelf (COTS) processors -- much more powerful than traditional rad-hard devices -- are increasingly used in a variety of low-altitude, short-duration CubeSat class missions. With this new-found headroom, the...

READ MORE
Guidelines for secure small satellite design and implementation: FY18 Cyber Security Line-Supported Program
271-280 of 2318