
Many people ask what I do as a graduate student research assistant. To give a short answer, I ensure the security and availability of special-purpose computers (embedded systems) in wireless sensor networks for critical applications, such as power plants, gas and oil pipelines, nuclear facilities, and other process control applications. I design software elements and select and define optimal hardware configurations to which that software is tailored. At least, that's the work I'm involved with at the moment.
The longer answer is that I work with an infrastructure known as SCADA, or Supervisory Control and Data Acquisition. A SCADA network represents a monitoring and control systems network consisting of a hierarchy of sensor/actuator nodes, a remote in-field terminal computer, and then a central management system. This allows the network and its systems to be monitored and operated remotely; for instance, a power plant can be run completely remotely, with all critical information being sent over the internet. Of course, this presents rather obvious security concerns. What happens if a computer designed to control a valve is compromised? Does the plant blow up? The scary answer is, yes, to a degree.
SCADA networks were largely designed in the 80s and 90s and featured embedded computers that were linked by cables. With the advent of low-power wireless networks, the systems were upgraded, but without any security considerations. This means that as soon as the enterprise firewall protecting the entire network is breached, anything can happen. The work I'm currently involved with involves identifying attacks at the level of the sensors in the field to determine if an intrusion has taken place.
The work I do there is derivative from research I have done previously for my master's thesis and other publications. This is all done within the TRUST research project (Team for Research in Ubiquitous Secure Technologies)
(website here), which funds my studies and living. I am a graduate student within
ISIS, or the Institute for Software Integrated Systems. The TRUST project itself spans eight different schools all across the United States, with research projects in medical systems, wireless sensor networks, malware control, etc.
The SCADA research project was somewhat thrust upon me as the result of a refocusing of TRUST goals. It isn't something that I want to continue to do as my dissertation topic, so today I made the decision to choose a different but related area for my dissertation research. Because of previous work that I've done on intelligent and hybrid-stage intrusion detection mechanisms, I have chosen to combine this with new tools that I have created during my work with the SCADA project. The SCADA research project will continue, but, for the dissertation, I will likely be focusing on security aspects of a different application that I have not chosen at this time.
In any case, if you ever wondered what I do, the above text gives you a quick snapshot - though of course rather incomplete - of the research and topics with which I'm involved. So, with that said, I'm tired, and need to get to bed. I still haven't started sorting pictures yet, but I promise, they'll come soon.