Handling a trillion (unfixable) flaws on a billion devices: Rethinking network security for the Internet-of-Things
Handling a trillion (unfixable) flaws on a billion devices: Rethinking network security for the Internet-of-Things
复制标题
DOI：
10.1145/2834050.2834095
复制
发表时间：
2015-11
期刊：
影响因子：
--
通讯作者：
Tian-jiao Yu;Vyas Sekar;S. Seshan;Yuvraj Agarwal;Chenren Xu
中科院分区：
文献类型：
--
作者：
Tian-jiao Yu;Vyas Sekar;S. Seshan;Yuvraj Agarwal;Chenren Xu
物联网（IoT）已迅速从炒作领域转变为现实，预计到2020年将部署超过250亿台设备。虽然物联网具有巨大的社会影响潜力，但它也带来了许多关键的安全挑战--物联网设备可能成为关键基础设施的入口，并可能被利用来泄露敏感信息。当今IT生态系统中传统的以主机为中心的安全解决方案（例如，防病毒、软件补丁）从根本上与物联网的现实不一致（例如，不良的供应商安全实践和受限的硬件）。我们认为，网络必须在确保物联网部署方面发挥关键作用。然而，物联网固有的规模、多样性、网络物理耦合和跨设备用例要求我们沿着三个关键方面重新思考网络安全：（1）安全策略的抽象;（2）学习攻击和正常配置文件的机制;以及（3）动态和上下文感知的执行能力。我们在本文中的目标是强调这些挑战，并勾勒出一个路线图，以避免这种迫在眉睫的安全灾难。
The Internet-of-Things (IoT) has quickly moved from the realm of hype to reality with estimates of over 25 billion devices deployed by 2020. While IoT has huge potential for societal impact, it comes with a number of key security challenges---IoT devices can become the entry points into critical infrastructures and can be exploited to leak sensitive information. Traditional host-centric security solutions in today's IT ecosystems (e.g., antivirus, software patches) are fundamentally at odds with the realities of IoT (e.g., poor vendor security practices and constrained hardware). We argue that the network will have to play a critical role in securing IoT deployments. However, the scale, diversity, cyberphysical coupling, and cross-device use cases inherent to IoT require us to rethink network security along three key dimensions: (1) abstractions for security policies; (2) mechanisms to learn attack and normal profiles; and (3) dynamic and context-aware enforcement capabilities. Our goal in this paper is to highlight these challenges and sketch a roadmap to avoid this impending security disaster.