Vigilia: Securing Smart Home Edge Computing
Vigilia: Securing Smart Home Edge Computing
复制标题
DOI：
10.1109/sec.2018.00013
复制
发表时间：
2018-10
期刊：
影响因子：
--
通讯作者：
R. Trimananda;Ali Younis;Bojun Wang;Bin Xu;Brian Demsky;G. Xu
中科院分区：
文献类型：
--
作者：
R. Trimananda;Ali Younis;Bojun Wang;Bin Xu;Brian Demsky;G. Xu
聪明的家联网设备越来越受欢迎。现代可编程的智能家居枢纽，例如智能设备，使房主能够以精致的方式管理设备，以节省能源，提高安全性并提供便利。不幸的是，许多智能家庭系统都包含漏洞，可能影响家庭安全和隐私。本文介绍了Vigilia，该系统通过限制设备的网络访问来缩小智能家族系统系统的攻击表面。随着现有的智能家居系统的关闭，我们已经在Vigilia中创建了类似的编程和配置模型的开放实现，并扩展了执行环境，以通过实例化基于设备的网络权限来最大程度地限制通信。我们已经实施并将守夜与最前列的物联网防御系统进行了比较；我们的结果表明，Vigilia的表现要优于这些系统，并构成可忽略的开销。
Smart home IoT devices are becoming increasingly popular. Modern programmable smart home hubs such as SmartThings enable homeowners to manage devices in sophisticated ways to save energy, improve security, and provide conveniences. Unfortunately, many smart home systems contain vulnerabilities, potentially impacting home security and privacy. This paper presents Vigilia, a system that shrinks the attack surface of smart home IoT systems by restricting the network access of devices. As existing smart home systems are closed, we have created an open implementation of a similar programming and configuration model in Vigilia and extended the execution environment to maximally restrict communications by instantiating device-based network permissions. We have implemented and compared Vigilia with forefront IoT-defense systems; our results demonstrate that Vigilia outperforms these systems and incurs negligible overhead.