IoT Device Profiling: From MUD Files to S×C Contracts

Matthíasson, Guðni; Giaretta, Alberto; Dragoni, Nicola

Autor(en):

Zusammenfassung

Security is a serious, and often neglected, issue in the Internet of Things (IoT). In order to improve IoT security, researchers proposed to use Security-by-Contract (S×C), a paradigm originally designed for mobile application platforms. However, S×C assumes that manufacturers equip their devices with security contracts, which makes hard to integrate legacy devices with S×C. In this paper, we explore a method to extract S×C contracts from legacy devices’ Manufacturer Usage Descriptions (MUDs). We tested our solution on 28 different MUD files, and we show that it is possible to create basic S×C contracts, paving the way to complete extraction tools.

Vollständige Referenz
BibTeX

Matthíasson, G., Giaretta, A. & Dragoni, N., (2020). IoT Device Profiling: From MUD Files to S×C Contracts. In: Roßnagel, H., Schunck, C. H., Mödersheim, S. & Hühnlein, D. (Hrsg.), Open Identity Summit 2020. Bonn: Gesellschaft für Informatik e.V.. (S. 143-154). DOI: 10.18420/ois2020_12

@inproceedings{mci/Matthíasson2020,
author = {Matthíasson, Guðni AND Giaretta, Alberto AND Dragoni, Nicola},
title = {IoT Device Profiling: From MUD Files to S×C Contracts},
booktitle = {Open Identity Summit 2020},
year = {2020},
editor = {Roßnagel, Heiko AND Schunck, Christian H. AND Mödersheim, Sebastian AND Hühnlein, Detlef} ,
pages = { 143-154 } ,
doi = { 10.18420/ois2020_12 },
publisher = {Gesellschaft für Informatik e.V.},
address = {Bonn}
}

	Dateien	Groesse	Format	Anzeige
	proceedings-12.pdf	224.4Kb	PDF	Öffnen

Sollte hier kein Volltext (PDF) verlinkt sein, dann kann es sein, dass dieser aus verschiedenen Gruenden (z.B. Lizenzen oder Copyright) nur in einer anderen Digital Library verfuegbar ist. Versuchen Sie in diesem Fall einen Zugriff ueber die verlinkte DOI: 10.18420/ois2020_12

Haben Sie fehlerhafte Angaben entdeckt? Sagen Sie uns Bescheid: Feedback abschicken