IoT Armor: An IoT Secure-by-Default Educational Toolkit

IoT Armor：物联网默认安全教育工具包

• 批准号: 10078019
• 金额: $ 4.08万
• 依托单位: THE UNIVERSITY OF WEST LONDON
• 依托单位国家: 英国
• 项目类别: Collaborative R&D
• 财政年份: 2023
• 资助国家: 英国
• 起止时间: 2023 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=10078019
• 关键词: IoT; Armor; Secure; Default; Educational

As the number of connected IoT devices continues to increase, concerns over their security have grown exponentially. Reports suggest that cyber-attacks on these devices could lead to an estimated loss of $116 billion per year by 2023. To tackle this issue, the UK government is introducing the Product Security and Telecommunications Infrastructure Bill, requiring a minimum level of security for all IoT devices sold in the UK. Despite the government's initiatives, there is still a significant void in the implementation of these security principles due to a lack of educational resources.IoT Armor addresses this gap with the help of an educational toolkit that provides hardware roots of trust for IoT devices using a Single-Board Computer (SBC) module tailored with a Trusted Platform Module (TPM) 2.0. The toolkit aims to provide simple tutorials, sample codes, and explanations to enable sound implementation of security measures, such as secure boot, remote attestation, device tamper detection, secure communication, and device authentication/verification. Overall, the development of this educational toolkit will help in promoting cybersecurity education and skills across the population, especially among developers with limited security knowledge or resources, to improve the overall security of IoT devices.

随着连接的物联网设备数量的不断增加，对其安全性的担忧也呈指数级增长。报告显示，到2023年，对这些设备的网络攻击可能导致每年1160亿美元的损失。为了解决这个问题，英国政府正在推出产品安全和电信基础设施法案，要求在英国销售的所有物联网设备都具有最低安全级别。尽管政府采取了多项举措，但由于缺乏教育资源，这些安全原则的实施仍存在重大空白。IoT Armor借助教育工具包解决了这一问题，该工具包使用基于可信协议2.0的单板计算机（SBC）模块为物联网设备提供硬件信任根。该工具包旨在提供简单的教程、示例代码和说明，以支持安全措施的合理实施，例如安全靴子、远程证明、设备篡改检测、安全通信和设备身份验证/验证。总体而言，该教育工具包的开发将有助于促进整个人群的网络安全教育和技能，特别是在安全知识或资源有限的开发人员中，以提高物联网设备的整体安全性。