Automatic Secure Code Migration in the Heterogeneous World of Web of Things

物联网异构世界中的自动安全代码迁移

• 批准号: 535907-2018
• 负责人: Pattabiraman, Karthik
• 金额: $ 4.07万
• 依托单位: University of British Columbia
• 依托单位国家: 加拿大
• 项目类别: Collaborative Research and Development Grants
• 财政年份: 2019
• 资助国家: 加拿大
• 起止时间: 2019-01-01 至 2020-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=690659
• 关键词: Automatic; Secure; Code; Migration; Heterogeneous

As computing becomes more and more prevalent in our daily lives, in the form of the Internet of Things (IoT), it is important to provide unified abstractions and interfaces to allow IoT devices to talk to each other seamlessly. Rather than invent yet another protocol or abstraction, the world wide web, with its HTTP protocol and the use of JavaScript language, offers a convenient and mature set of technologies to enable IoT devices to communicate - this is also known as the Web of Things (WoT). Simultaneously, edge computing, which seeks to offload computations from centralized cloud or data centers and execute them on the devices themselves, has been fueled by the advent of more capable devices in the IoT space, and the need for low latencies and data privacy in IoT applications. In this proposal, we seek to develop an edge computing framework and services to execute high-level applications written in the JavaScript language on WoT devices. To this end, we have developed a middleware layer called ThingsJS, which allows JavaScript code to be migrated among WoT devices, and the devices and the cloud. However, ThingsJS lacks many important abstractions that programmers have come to expect for building dependable and secure applications, as well as services for common operations available in cloud data centers. We will address this gap by taking a three pronged approach in this proposal. In the first prong, we will provide high-level edge services similar to those found in cloud data centers. In the second prong, we will provide failure tolerance and security as a service for edge applications on WoT devices. In the third prong, we will develop novel techniques for automated testing and test generation of WoT applications. Together, the three prongs will enable programmers to build highly capable, performant, dependable and secure WoT applications with minimal effort. Our research will thus be instrumental for leveraging the power of the WoT, and enable this technology in multiple domains such as healthcare, connected vehicles, and smart homes.

随着计算以物联网(IoT)的形式在我们的日常生活中变得越来越普遍，提供统一的抽象和接口以允许IoT设备之间无缝对话变得非常重要。万维网并没有发明另一种协议或抽象，而是通过其HTTP协议和使用JAVASCRIPT语言，提供了一套方便且成熟的技术，使物联网设备能够通信-这也被称为物联网(WoT)。与此同时，边缘计算寻求将计算从集中式云或数据中心卸载并在设备本身上执行，这得益于物联网空间中功能更强大的设备的出现，以及物联网应用对低延迟和数据隐私的需求。在这个提案中，我们寻求开发一个边缘计算框架和服务，以便在WoT设备上执行用JAVASCRIPT语言编写的高级应用程序。为此，我们开发了一个名为ThingsJS的中间件层，它允许在WoT设备、设备和云之间迁移JavaScript代码。然而，ThingsJS缺乏程序员在构建可靠、安全的应用程序时所期望的许多重要抽象，以及云数据中心可用的常见操作服务。我们将在这项提案中采取三管齐下的方法来解决这一差距。在第一个方面，我们将提供类似于云数据中心的高级别边缘服务。在第二个方面，我们将为WoT设备上的边缘应用提供容错和安全服务。在第三个方面，我们将开发用于自动测试和测试生成WoT应用程序的新技术。这三个方面结合在一起，将使程序员能够以最少的努力构建功能强大、性能可靠和安全的WoT应用程序。因此，我们的研究将有助于利用WoT的力量，并在医疗保健、互联车辆和智能家居等多个领域启用这项技术。