Defining Actionable Rules for Verifying IOT Safety and Security

Published

May 18, 2020

Author(s)

Kayla Ibrahim, Suryadipta Majumdar, Daniel Bastos, Anoop Singhal

Abstract

Internet of Things (IoT) is being widely adopted in recent years. Security, however, has lagged behind, as evidenced by the increasing number of attacks that use IoT devices (e.g., an arson that uses a smart oven, burglary via a smart lock). Therefore, the transparency and accountability of those devices very often become questionable. To that end, formally verifying the system state of those devices against desirable security rules might be a promising solution. However, there is a significant gap between the high-level security recommendations (e.g., NISTIR 8228, NISTIR 8259, OWASP IoT guidance, UK code of practice, and ENISA good practices) for IoT, and the low-level system data (e.g., sensor data, logs, configurations) in IoT devices. This poster aims to bridge this gap and design a technique to automatically define actionable security rules based on those high-level recommendations and to enable the verification of those low-level implementations of IoT devices.

Proceedings Title

41st IEEE Symposium on Security and Privacy

Conference Dates

May 18-20, 2020

Conference Location

San Francisco, CA, US

Conference Title

41st IEEE Symposium on Security and Privacy 2020

Pub Type

Conferences

Download Paper

Local Download

Keywords

IoT, security rules, verification

Citation

Ibrahim, K. , Majumdar, S. , Bastos, D. and Singhal, A. (2020), Defining Actionable Rules for Verifying IOT Safety and Security, 41st IEEE Symposium on Security and Privacy, San Francisco, CA, US, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=930071 (Accessed November 21, 2024)