报告题目:物联网时代安全与隐私的新挑战
报告日期及时间:2017年10月18号上午10:00
报告地点: 计算机学院 C203
报告人:Yier Jin
报告人国籍:美国
报告人单位:美国弗罗里达大学
报告人简介:
Yier Jin is the Endowed IoT Term Professor in the Warren B. Nelms Institute for the Connected World and also an Associate Professor in the Department of Electrical and Computer Engineering (ECE) in the University of Florida (UF). Prior to joining UF, he was an assistant professor in the ECE Department at the University of Central Florida (UCF). He received his PhD degree in Electrical Engineering in 2012 from Yale University after he got the B.S. and M.S. degrees in Electrical Engineering from Zhejiang University, China, in 2005 and 2007, respectively. His research focuses on the areas of embedded systems design and security, trusted hardware intellectual property (IP) cores and hardware-software co-design for modern computing systems. His is currently focusing on the design and security analysis on Internet of Things (IoT) and wearable devices with particular emphasis on information integrity and privacy protection in the IoT era. Dr. Jin received the Best Paper Award in the 52nd Design Automation Conference in 2015, the 21st Asia and South Pacific Design Automation Conference in 2016, and the 10th IEEE Symposium on Hardware-Oriented Security and Trust in 2017.
报告摘要:
Within the past decade, the number of IoT devices introduced in the market has increased dramatically. The total is approaching a staggering 15 billion, meaning that there are currently roughly two connected devices per living human. This trend is expected to continue at a rapid pace, with an estimated 50 billion connected devices by the year 2020. However, the massive deployment of IoT devices has led to significant security and privacy concerns given that security is often treated as an afterthought for IoT systems. Security issues may come at different levels, from deployment issues that leave devices exposed to the internet with default credentials, to implementation issues where manufacturers incorrectly employ existing protocols or develop proprietary ones for communications that have not been examined for their sanity. On the hardware side, a device may also be vulnerable. An attacker with physical access to a device may be able to alter its functionality. A compromised device, whether by remote or physical access means, can then be used as a tool to exfiltrate sensitive network information, attack other devices, and as means of automatically sending malware over the internet. In this talk, I will first introduce the emerging security and privacy challenges in the IoT domain. I will then present our effort to systematically summarize IoT security vulnerabilities and develop dedicated IoT security. The developed methods will lead to a design-for-security flow towards trusted IoT and their applications.
邀请人: 王鹃 副教授