CPS: Synergy: Collaborative Research: Support for Security and Safety of Programmable IoT Systems

这项工作研究了如何在物联网（IoT）系统中获得安全性和安全性，其中多个设备（事物），每个设备（事物）都是与其他设备隔离设计的，它们被聚集在一起形成一个网络系统，通过一个或多个软件应用程序（“应用程序”）进行控制。物联网环境中的“物”可以包括简单的设备，如开关、灯泡、智能锁、恒温器和安全报警器，也可以包括复杂的系统，如电器、智能手机和汽车。软件物联网“应用程序”可以监控和控制家庭，汽车，城市和企业中的多个设备，提供诸如能源效率，安全性，安全性和用户便利性等显着优势。不幸的是，可编程物联网系统也带来了新的风险，包括黑客可以通过有缺陷的物联网应用程序远程控制智能家居、汽车和城市中的设备。测试物联网应用程序以消除漏洞目前具有挑战性，因为这些应用程序可能与各种物理设备进行交互，包括在应用程序开发期间甚至不可用的设备。拟议的工作将有助于开发有效测试物联网应用程序的技术，并对其运行时行为实施安全和安全约束。更具体地说，拟议的工作围绕三个技术重点：1)创建虚拟设备模型，以帮助有效地系统测试物联网应用程序，而不知道应用程序将提前控制的物理设备的精确细节；2)自动化物联网应用程序的测试开发，以根据一组灵活的设备检查安全和安全规范；3)为运行时安全性和安全性断言的规范实施提供支持。这项工作包括使用各种设备进行广泛的实验和评估，并将在加固这一重要空间方面取得重大进展

This work examines how to get safety and security in Internet of Things (IoT) systems where multiple devices (things), each designed in isolation from others, are brought together to form a networked system, controlled via one or more software applications ("apps"). "Things" in an IoT environment can include simple devices such as switches, lightbulbs, smart locks, thermostats, and safety alarms as well as complex systems such as appliances, smartphones, and cars. Software IoT "apps" can monitor and control multiple devices in homes, cars, cities, and businesses, providing significant benefits such as energy efficiency, security, safety, and user convenience. Unfortunately, programmable IoT systems also introduce new risks, including enabling remote control by hackers of devices in smart homes, cars, and cities, via buggy IoT apps. Testing IoT apps to remove bugs is currently challenging due to a variety of physical devices with which such apps may interact, including devices that were not even available during app development. The proposed work will help develop techniques for testing IoT apps efficiently and for enforcing safety and security constraints on their run-time behavior.More specifically, the proposed work is centered around three technical thrusts: 1) creating virtual device models to help efficiently test IoT apps systematically without knowing the precise details of physical devices that the apps will control in advance; 2) automating test development for an IoT app to check safety and security specifications against a flexible set of devices; and 3) providing support for enforcement of specifications at run-time for security and safety assertions. The work includes extensive experimentation and evaluation using diverse devices and will represent a significant advance in hardening this important spaces