Net-Centric Sensor Grid Phase 3
Advanced Cloud Computing Technology for Sensor Grid
FA8650-D-09-1639
Final Presentation and Demo
Anabas, Inc.November 4, 2010
Close-out Charts
• Background (Alex Ho - Anabas)
• Final Status (Alex Ho)
• Results (Alex Ho, Steven Andrew Myers – IU, Xiaofeng Wang – IU, Apu Chandrasen Kapadia – IU, Geoffrey Fox – IU, Gary Whitted – Ball)
• Discussions
BACKGROUND
BackgroundPhase III Contract Scope
• Continue the research & development of the sensor grid technologies developed in previous AFRL SBIR Phase I and II efforts on Grid of Grids for Information Management.
• The initial prototyped sensor grid technologies and system are designed for managing, integrating and making interoperable separately developed sensors and grids, grids using publish-subscribe based mediation services.
• Prototypes were developed for SCGMMS with UDOP capability and a Community Collaboration grid building tool called Grid Builder.
Background Phase III Research Areas
• Research Area A - Enhanced Grid and Cloud Service Technologies
– Addresses new grid of grid, grid service, and cloud computing technologies that would extend and complement the Phase 2 prototyped Sensor Grid framework capabilities
– Special emphasis on the ability to provide reliable, trusted sensor interactions and vigilant sensing– Emphasis on open systems architectures, industry, and international standards– Developing and demonstrating sensor grid technologies to support ISR sensing exploration and development, and
supporting trusted collaborative sensor systems. – Modifications of the underlying architecture and modifications to the user interface
• Research Area B – Applications of Advanced Trustworthiness Technologies for Net-centric Sensor Grids
– Addresses research and development of methodologies, tools and techniques to measure, assess and evaluate trustworthiness for system of systems and grid of grids architectures and to enable trusted, collaborative operations across heterogeneous, distributed sensor systems.
– Techniques to enable trusted sensor data exchange between distributed heterogeneous sensor networks– Methods to generate and communicate trust within sensor networks and methods to monitor health and status of
heterogeneous sensor systems
• Research Area C - Technology Special Projects– Special research projects that do not fall explicitly into one of the technology areas defined above– Research arising from situations as the result of a technological breakthrough or technology roadmap need– Support for special field test and evaluation programs– Support quick deployment and implementation – Support for training needs
Background (cont’d)Task Order 1:Objective and Sub-Tasks
Sub-tasks:(1) Determine enhanced Sensor Grid requirements(2) Develop advanced technologies (3) Develop sensor management services(4) Investigate trustworthiness algorithms (5) Prototype technologies, integration, and demonstration(6) Investigate and develop application scenarios for the enhanced Sensor Grid
To conduct research, development, and integration ofcloud computing and advanced management services for a Network-centric Sensor Grid.
Background (cont’d)Sub-task Assignments (P: Primary S: Supporting C: Co-responsible)
Sub-task Anabas Ball IU
(1) Determine enhanced Sensor Grid requirements (P) (S) (S)(2) Develop advanced technologies (P) (S) (C)(3) Develop Sensor Management Services (P) (S) (C)(4) Investigate Trustworthiness Algorithms (S) (S) (P)(5) Prototype Development, Integration & Demo (P) (S) (S)(6) Investigate and develop application scenarios (C) (P) (S)
FINAL STATUS
Final StatusCompletion
We have completed by October 2010 (1) Determine enhanced Sensor Grid requirements
- some important requirements• secured transport layer• scalable testbed on commercial clouds• mobile devices as sensor hosts or sensor stream relays• Impromptu-independent Sensor Grid
(2) Analysis of cloud and cloud technologies for data and sensor systems
Final Status (cont’d)Completion
(3) Develop advanced technologies • enhanced SCGMMS to be SSL-capable• implemented EC2-based SCGMMS and Grid Builder• enhanced EC2-based SCGMMS and Grid Build to
support distributed clouds• designed and added a mobile proxy architecture• enhanced and implemented NB native bridges for
Android and Gumstix mobile platforms• designed and developed as a first step an
implementation of a light-weight Sensor Grid for transition to Sensor Cloud
• designed and implemented an initial trust architecture and a naïve trustworthiness sensor for integrated system testing
Final Status (cont’d)Completion
(4) Develop enhanced sensor grid management services• Designed and developed an initial management service
and mechanisms for setting and viewing sensor trust attributes
(5) Investigate trustworthiness algorithms and security vulnerabilities in clouds and Web systems and apps
• HMM-based trustworthiness algorithms using contextual data to authenticate and deauthenticate smartphones – completed initial research and experimentation
• Side-channel leakage vulnerability and defense strategies – completed initial research and experimentation
• Soundminer attack scenarios and defense – completed initial research and experimentation
Final Status (cont’d)Completion
(6) Investigate and develop application scenarios for the enhanced Sensor Grid• Ball designed application demo scenario will be
demonstrated
(7) Prototype technologies, integration, and demonstration• Impromptu-based trust architecture• Android remote control sensor for Lego NXT robot on
light-weight sensor grid• Places and Faces – using contextual data to
authenticate and de-authenticate smartphones• Side channel leakages and defenses• Soundminer attack scenarios and defense strategies• Ball demo using light-weight sensor grid and NB
Final Status (cont’d)Publications
• Marlon E. Pierce, Geoffrey C. Fox, Yu Ma, Jun Wang "Cloud Computing and Spatial Cyberinfrastructure" submitted for Publication July 2010
• Geoffrey Fox 22nd ACM "Algorithms and Application for Grids and Clouds " Keynote Talk at Symposium on Parallelism in Algorithms and Architectures Santorini, Greece June 13 - 15, 2010
• Apu Kapadia, Steven Myers, XiaoFeng Wang and Geoffrey Fox " Secure Cloud Computing with Brokered Trusted Sensor Networks " Proceedings of The 2010 International Symposium on Collaborative Technologies and Systems (CTS 2010) May 17-21, 2010 The Westin Lombard Yorktown Center Chicago, Illinois, USA
• Roman Schlegel, Kehuan Zhang, Xiayong Zhou, Mehool Intwala, Apu Kapadia, and XiaoFeng Wang, “Soundminer: A Stealthy and Context-Aware Sound Trojan for Smartphone,” To appear in the 18th Annual Network & Distributed System Security Symposium (NDSS ’11), San Diego, CA, February 6-9, 2011.
Final Status (cont’d)Publications
• S. Chen, R. Wang, X. Wang and K. Zhang, 2010 “Side-Channel Leaks in Web Applications: a Reality Today, a Challenge Tomorrow”, In Proceedings of the 31st IEEE Symposium on Security and Privacy (IEEE S&P Oakland)
• K. Zhang, Z. Li, R. Wang, X. Wang and S.Chen, 2010 “Sidebuster Automated Detection and Quantification of Side-Channel Leaks in Web Application Development”. To appear in Proceedings of the 17th ACM Conference on Computer and Communications Security (CCS).
Final Status (cont’d)
Final Report
• A draft will be completed by or before Nov 30, 2010
Funding
• The SBIR Phase 3 Task Order 1 project is completed within budget.
RESULTS
• Added configurable SSL for sensor grid on clouds• Added SSL for broker to broker in sensor grid
Results: Advanced Technologies Enhanced Security for Sensor Grid
on Cloud
Results: Advanced TechnologiesSensor Grid On Clouds
• Implemented AFRL SBIR Phase 2 SCGMMS, Sensor Grid, and Grid Builder on Amazon EC2 Linux and Windows clouds.
• Extended SCGMMS to inter-clouds (EC2-US and EC2-EU) as a proving ground for enhanced global deployment scalability and to support future distributed, heterogeneous sensor networks.
Results: Advanced TechnologiesInter-cloud Performance (1)
Inter-cloud between EC2-US and EC2-EU
0
2040
60
80
100120
140
1 2 4 8 16 32 64 128
# of Connections
Th
rou
gh
pu
t (M
bp
s)
The EC2-US and EC2-EU inter-cloud sustains a throughput of 126 mbps at 128 Iperf connection. The maximum sustainable throughput has not been reached.
Results: Advanced TechnologiesInter-cloud Performance (2)
The EC2-US and EC2-EU inter-cloud sustains a near linear scalability with an aggregate Trans-Atlantic throughput measured at nearly 500 mbps in this test case.
Inter-cloud Bandwidth Scalability (64 connections)
0
100
200
300
400
500
600
1 2 3 4
Number of instance pairs
Tota
l Th
rou
gh
pu
t (M
bp
s)
Results: Advanced TechnologiesInter-cloud QoS for VoIP
Round-trip latency and jitter measurement satisfies CISCO VoIP QoS network requirementIn all but the case of 2200 users. Only 1 packet lost was detected over a 1.5 day duration.
• Added sensor proxy manager to support mobile sensors
• Sensor proxy manager provides a discovery service for a mobile sensor to connect to a nearby Grid Builder
• Added SSL for mobile handsets to sensor proxy manager communication
Results: Advanced TechnologiesMobile Handsets Support
Results: Advanced TechnologiesTrust Architecture
Some design considerations• An architecture to support easy access to sensor
data and metadata for evaluation of trustworthiness algorithms in sensor grid
• A simple interface to integrate trustworthiness algorithms with sensor grid
Current model supported by sensor grid• Trustworthiness algorithms could be implemented in
the form of trustworthiness sensors. This sensor type can access sensor data and sensor metadata in a sensor grid, and provides its own sensor data (calculated “trustworthiness value”) to a sensor grid.
Results: Advanced TechnologiesAn Initial Light-weight Sensor Grid
• We re-designed SCGMMS to remove its dependency on Impromptu
• We developed an initial light-weight sensor grid that supports better openness and standards-compliance
• 2 of the demos today will use this new light-weight sensor grid. One is for an engineering demo by IU and the other an application scenario demo by Ball
End of Presentation on Core Infrastructure and Middleware
ACKNOWLEDGMENTS
We are grateful to:
• Bill McQuay• James J. Foshee• Raymund Garcia• The U.S. Air Force Research Laboratory – AFRL/RYT• Indiana University CGL/Security Group (Subcontractor Partner)• Ball Aerospace (Subcontractor Partner)
WHAT WE PLAN TO DO
High-Level Sub-tasks• Research and assess a logical sensor overlay architecture to enable dynamic
tasking and configure groups of sensors for selected layered sensing architecture. (Estimated: by mid-December).
• Integrate layered sensing with UDOP. (Estimated: by mid-January)• Research and develop some HMM-based and other appropriate methods to
establish trust and combine/aggregate trust in layered sensing. (Estimated: by end of November 2009 for problem understanding and technical design; by end of March for some preliminary implementation).
• Add support for Android phone as a commercial sensor container for trustworthiness algorithm study. (Estimated: by end of March 2010).
• System integrate, trust, layered sensing, and all newly added features with SCGMMS and Grid Builder. (Estimated: by mid-April 2010)
• Work with AFRL,Ball and IU to support investigation related to demonstrating the enhanced sensor grid for multi-layered sensing urban scenario. (On a continuous basis)
• Package, deploy the enhanced Sensor Grid on clouds for experimentation (Estimated: by mid-May 2010)
• Documentation (Estimated: by end of June 2010.)
A TYPICAL TRUSTED SENSOR DEMO ARCHITECTURE
FOR CLOUDS
ACKNOWLEDGMENTS
We are grateful to:
• Bill McQuay• James J. Foshee• Raymund Garcia• The U.S. Air Force Research Laboratory – AFRL/RYT• Indiana University CGL/Security Group (Subcontractor Partner)• Ball Aerospace (Subcontractor Partner)
Appendix
RESEARCH SENSOR GRIDSon Clouds
Sensor Grids and Clouds
• Secure clouds (elastic resources) can be used to process sensor information.– Computing resources can grow or shrink depending on demand.– Resource locations can be optimized using content distribution
network strategies.• Clouds also make great testbeds
– Simulate large numbers of sensors to test scaling and performance
– Simulate unreliable networks– Simulate attack strategies, consequences of compromised
systems in very large networks.– Investigate mitigation and containment strategies for
compromised resources.
Sensor Grids and Clouds
• Tracks latest open standards, research community and national deployment efforts on clouds and grids.
• An example is the NSF-funded FutureGrid led by Geoffrey Fox for e-Science and high-performance computing to support the development of new system software and applications that can be simulated in order to accelerate the adoption of new technologies in scientific computing.
RESEARCH APPROACH TO
LAYERED SENSING
Layered Sensing• We will research, assess, and evaluate possible advanced sensor
management services which can dynamically task and configure groups of sensors for selected layered sensing architectures.
• We will explore using an overlay architecture for the enhanced Sensor Grid to support construction of selected logically layered sensing architectures.
• The logical overlay architecture will be integrated with the current UDOP capability.
NEAR TERM RESEARCHPLAN ON TRUSTED LAYERED
SENSING BY IU SECURITY GROUP
Results: Advanced TechnologiesStrawman Trust Architecture
Some design considerations• An architecture to support evaluation of
trustworthiness algorithm in sensor grid• An interface to integration trustworthiness algorithm
Current implementation• Designed, implemented and integrated with
SCGMMS, Sensor Grid, and Grid Builder a preliminary sensor-centric trust architecture to support sensor data streams in tandem with sensor attribute states for trustworthiness algorithms modeled as trustworthiness sensors.
Top Related