Konferenzbeitrag
IoT Device Profiling: From MUD Files to S×C Contracts
Lade...
Volltext URI
Dokumententyp
Text/Conference Paper
Zusatzinformation
Datum
2020
Autor:innen
Zeitschriftentitel
ISSN der Zeitschrift
Bandtitel
Quelle
Verlag
Gesellschaft für Informatik e.V.
Zusammenfassung
Security is a serious, and often neglected, issue in the Internet of Things (IoT). In order to
improve IoT security, researchers proposed to use Security-by-Contract (S×C), a paradigm originally
designed for mobile application platforms. However, S×C assumes that manufacturers equip their
devices with security contracts, which makes hard to integrate legacy devices with S×C. In this paper,
we explore a method to extract S×C contracts from legacy devices’ Manufacturer Usage Descriptions
(MUDs). We tested our solution on 28 different MUD files, and we show that it is possible to create
basic S×C contracts, paving the way to complete extraction tools.