Net Centric Sensor Grid Phase 3

Net-Centric Sensor Grid Phase

Advanced Cloud Computing Technology

for Sensor Grid

FA8650-D-09-1639

Final Presentation and Demo

Anabas, Inc

Close-out

Charts

• Final Status (Alex Ho)

• Results (Alex Ho,

Steven Andrew Myers – IU, Xiaofeng Wang – IU,

Apu Chandrasen Kapadia – IU,

Geoffrey Fox – IU, Gary Whitted – Ball)

Backgroun

Phase III Contract Scope

• Continue the research & development of the sensor grid technologies developed in previous AFRL SBIR Phase I and II efforts on Grid of Grids for Information Management.

• The initial prototyped sensor grid technologies and system are designed for managing, integrating and making

interoperable separately developed sensors and grids, grids using publish-subscribe based mediation services.

• Prototypes were developed for SCGMMS with UDOP

Background

Phase III Research Areas

• Research Area A - Enhanced Grid and Cloud Service Technologies

– Addresses new grid of grid, grid service, and cloud computing technologies that would extend and complement the Phase 2 prototyped Sensor Grid framework capabilities

– Special emphasis on the ability to provide reliable, trusted sensor interactions and vigilant sensing

– Emphasis on open systems architectures, industry, and international standards

– Developing and demonstrating sensor grid technologies to support ISR sensing exploration and development, and supporting trusted collaborative sensor systems.

– Modifications of the underlying architecture and modifications to the user interface

• Research Area B – Applications of Advanced

Trustworthiness Technologies for Net-centric Sensor Grids

– Addresses research and development of methodologies, tools and techniques to measure, assess and evaluate trustworthiness for system of systems and grid of grids architectures and to enable trusted, collaborative operations across heterogeneous, distributed sensor systems.

– Techniques to enable trusted sensor data exchange between distributed heterogeneous sensor networks

– Methods to generate and communicate trust within sensor networks and methods to monitor health and status of heterogeneous sensor systems

• Research Area C - Technology Special Projects

– Special research projects that do not fall explicitly into one of the technology areas defined above

– Research arising from situations as the result of a technological breakthrough or technology roadmap need

– Support for special field test and evaluation programs

– Support quick deployment and implementation

Background (cont’d

Task Order 1:Objective and Sub-Tasks

Sub-tasks:

(1) Determine enhanced Sensor Grid requirements (2) Develop advanced technologies

(3) Develop sensor management services (4) Investigate trustworthiness algorithms

(5) Prototype technologies, integration, and demonstration (6) Investigate and develop application scenarios for

the enhanced Sensor Grid

To conduct research, development, and integration of cloud computing and advanced management

Background (cont’d)

Sub-task

Assignments

(P: Primary S: Supporting C: Co-responsible)

Sub-task Anabas Ball IU

Final Status

We have completed by October 2010

• Determine enhanced Sensor Grid requirements - some important requirements

• secured transport layer

• scalable testbed on commercial clouds

• mobile devices as sensor hosts or sensor stream relays • Impromptu-independent Sensor Grid

Final Status (cont’d)

(3) Develop advanced technologies

• enhanced SCGMMS to be SSL-capable

• implemented EC2-based SCGMMS and Grid Builder • enhanced EC2-based SCGMMS and Grid Build to

support distributed clouds

• designed and added a mobile proxy architecture • enhanced and implemented NB native bridges for

Android and Gumstix mobile platforms

• designed and developed as a first step an

implementation of a light-weight Sensor Grid for transition to Sensor Cloud

• designed and implemented an initial trust architecture and a naïve trustworthiness sensor for integrated

Final Status (cont’d)

(4) Develop enhanced sensor grid management services

• Designed and developed an initial management service and mechanisms for setting and viewing sensor trust attributes

(5) Investigate trustworthiness algorithms and security

vulnerabilities in clouds and Web systems and apps • HMM-based trustworthiness algorithms using

contextual data to authenticate and deauthenticate smartphones – completed initial research and

experimentation

• Side-channel leakage vulnerability and defense strategies – completed initial research and

experimentation

Final Status (cont’d)

(6) Investigate and develop application scenarios for the enhanced Sensor Grid

• Ball designed application demo scenario will be demonstrated

(7) Prototype technologies, integration, and demonstration • Impromptu-based trust architecture

• Android remote control sensor for Lego NXT robot on light-weight sensor grid

• Places and Faces – using contextual data to authenticate and de-authenticate smartphones • Side channel leakages and defenses

Final Status (cont’d)

Publications

• Marlon E. Pierce, Geoffrey C. Fox, Yu Ma, Jun Wang "Cloud Computing and Spatial Cyberinfrastructure" submitted for

Publication July 2010

• Geoffrey Fox 22nd ACM "Algorithms and Application for Grids and Clouds " Keynote Talk at Symposium on Parallelism in

Algorithms and Architectures Santorini, Greece June 13 - 15, 2010

• Apu Kapadia, Steven Myers, XiaoFeng Wang and Geoffrey Fox " Secure Cloud Computing with Brokered Trusted Sensor Networks " Proceedings of The 2010 International Symposium on

Collaborative Technologies and Systems (CTS 2010) May 17-21, 2010 The Westin Lombard Yorktown Center Chicago, Illinois, USA

• Roman Schlegel, Kehuan Zhang, Xiayong Zhou, Mehool Intwala,

Apu Kapadia, and XiaoFeng Wang, “Soundminer: A Stealthy and Context-Aware Sound Trojan for Smartphone,” To appear in the

18th _{Annual Network & Distributed System Security Symposium}

Final Status (cont’d)

Publications

• S. Chen, R. Wang, X. Wang and K. Zhang, 2010 “Side-Channel

Leaks in Web Applications: a Reality Today, a Challenge

Tomorrow”, In Proceedings of the 31st _{IEEE Symposium on}

Security and Privacy (IEEE S&P Oakland)

• K. Zhang, Z. Li, R. Wang, X. Wang and S.Chen, 2010 “Sidebuster

Automated Detection and Quantification of Side-Channel Leaks in Web Application Development”. To appear in Proceedings of the 17th _{ACM Conference on Computer and Communications}

Final Status (cont’d)

Final Report

• A draft will be completed by or before Nov 30, 2010

Funding

• Added configurable SSL for sensor grid on clouds • Added SSL for broker to broker in sensor grid

Results: Advanced Technologie

Enhanced Security for Sensor Grid

Results: Advanced Technologie

Sensor Grid On Clouds

• Implemented AFRL SBIR Phase 2 SCGMMS, Sensor Grid, and Grid Builder on Amazon EC2 Linux and Windows

clouds.

• Extended SCGMMS to inter-clouds (EC2-US and EC2-EU) as a proving ground for enhanced global deployment

Results: Advanced Technologie

Inter-cloud Performance (1)

Results: Advanced Technologie

Inter-cloud Performance (2)

Results: Advanced Technologie

Inter-cloud QoS for VoIP

• Added sensor proxy manager to support mobile sensors

• Sensor proxy manager provides a discovery service for a mobile sensor to connect to a nearby Grid

Builder

• Added SSL for mobile handsets to sensor proxy manager communication

Results: Advanced Technologie

Trust Architecture

Some design considerations

•An architecture to support easy access to sensor data and metadata for evaluation of trustworthiness algorithms in sensor grid

•A simple interface to integrate trustworthiness algorithms with sensor grid

Current model supported by sensor grid

•Trustworthiness algorithms could be implemented in the form of trustworthiness sensors. This sensor type can access sensor data and sensor metadata in a sensor grid, and provides its own sensor data

Results: Advanced Technologie

An Initial Light-weight Sensor Grid

•We re-designed SCGMMS to remove its dependency on Impromptu

ACKNOWLEDGMENTS

We are grateful to:

• Bill McQuay

• James J. Foshee • Raymund Garcia

• The U.S. Air Force Research Laboratory – AFRL/RYT

High-Level Sub-tasks

• Research and assess a logical sensor overlay architecture to enable dynamic tasking and configure groups of sensors for selected layered sensing

architecture. (Estimated: by mid-December).

• Integrate layered sensing with UDOP. (Estimated: by mid-January)

• Research and develop some HMM-based and other appropriate methods to establish trust and combine/aggregate trust in layered sensing. (Estimated: by end of November 2009 for problem understanding and technical design; by end of March for some preliminary implementation).

• Add support for Android phone as a commercial sensor container for trustworthiness algorithm study. (Estimated: by end of March 2010).

• System integrate, trust, layered sensing, and all newly added features with SCGMMS and Grid Builder. (Estimated: by mid-April 2010)

• Work with AFRL,Ball and IU to support investigation related to

demonstrating the enhanced sensor grid for multi-layered sensing urban scenario. (On a continuous basis)

• Package, deploy the enhanced Sensor Grid on clouds for experimentation (Estimated: by mid-May 2010)

A TYPICAL TRUSTED SENSOR DEMO

ARCHITECTURE

ACKNOWLEDGMENTS

We are grateful to:

• Bill McQuay

• James J. Foshee • Raymund Garcia

• The U.S. Air Force Research Laboratory – AFRL/RYT

Sensor Grids and Clouds

• Secure clouds (elastic resources) can be used to process

sensor information.

– Computing resources can grow or shrink depending on

demand.

– Resource locations can be optimized using content

distribution network strategies.

• Clouds also make great testbeds

– Simulate large numbers of sensors to test scaling and

performance

– Simulate unreliable networks

– Simulate attack strategies, consequences of compromised

systems in very large networks.

– Investigate mitigation and containment strategies for

Sensor Grids and Clouds

• Tracks latest open standards, research community and

national deployment efforts on clouds and grids.

• An example is the NSF-funded FutureGrid led by Geoffrey

Fox for e-Science and high-performance computing to support the development of new system software and

RESEARCH APPROACH

T

Layered Sensing

• We will research, assess, and evaluate possible advanced sensor management services which can dynamically task and configure groups of sensors for selected layered sensing architectures.

• We will explore using an overlay architecture for the enhanced Sensor Grid to support construction of selected logically layered sensing architectures.

NEAR TERM RESEARC

Results: Advanced Technologie

Strawman Trust Architecture

•An architecture to support evaluation of trustworthiness algorithm in sensor grid

•An interface to integration trustworthiness algorithm

Current implementation

•Designed, implemented and integrated with SCGMMS, Sensor Grid, and Grid Builder a preliminary sensor-centric trust architecture to

support sensor data streams in tandem with sensor attribute states for trustworthiness algorithms