SaTC: CORE: Medium: Sentinel: Constructing Secure Smart Home IoT Systems via Managed Communications

智能家居设备，如恒温器、婴儿监视器、安全传感器和电表，为家庭带来了显著的好处，例如减少了能源和水的消耗，增加了便利性，以及远程监控。但它们也带来了重大的新安全挑战，因为它们彼此之间以及通过互联网与基于云的系统进行通信。为这些智能家居设备配置各种安全设置对于家庭用户来说是非常具有挑战性的，设备制造商通常没有资源来投资保护他们的智能家居产品。哨兵项目正在开发工具和技术，以提高智能家居系统的安全性。Sentinel项目团队正在开发将智能家居设备与攻击者隔离的技术，同时仍然实现所需的功能。该方法利用了两个关键的见解：(1)智能家居设备不需要运行通用软件，(2)智能家居设备严重依赖于可以预先定义的通信模式。Sentinel软件开发框架提供了用于定义和执行通信模式的应用程序编程语言支持，以及用于检查安全属性的静态分析工具。该系统使用基于路由器的运行时保护来保护智能家居设备之间的本地通信，并使用加密技术来保护设备与云之间的通信。

Smart home devices such as thermostats, baby monitors, security sensors, and power meters offer significant benefits for the home, such as reduced energy and water consumption, increased convenience, and remote monitoring.  But they also bring significant new security challenges as they communicate with one another and with cloud-based systems through the Internet. Configuring the diverse security settings for these smart home devices is very challenging for home users and the device manufacturers often do not have the resources to invest in securing their smart home products. The Sentinel project is developing tools and techniques to improve security for smart home systems. The Sentinel project team is developing techniques to isolate smart home devices from attackers, while still implementing the desired functionality. The approach leverages two key insights: (1) Smart home devices do not need to run general purpose software, and (2) Smart home devices rely heavily on communication patterns that can be pre-defined. The Sentinel software development framework provides application programming language support for defining and enforcing communication patterns, as well as static analysis tools to check security properties. The system uses router-based runtime protection to secure local communications among smart home devices and cryptographic techniques for securing the communication between devices and the cloud.