CPS: Synergy: Collaborative Research: Support for Security and Safety of Programmable IoT Systems

这项工作研究了如何在物联网（IoT）系统中获得安全性和安全性，其中多个设备（事物），每个设备（事物）都与其他设备（事物）隔离设计，被聚集在一起形成一个网络系统，通过一个或多个软件应用程序（“应用程序”）进行控制。物联网环境中的“物”可以包括开关、灯泡、智能锁、恒温器和安全报警器等简单设备，也可以包括家用电器、智能手机和汽车等复杂系统。软件物联网“应用程序”可以监视和控制家庭、汽车、城市和企业中的多个设备，提供显著的好处，如能源效率、安全性、安全性和用户便利性。 不幸的是，可编程物联网系统也带来了新的风险，包括黑客可以通过错误的物联网应用程序远程控制智能家居、汽车和城市中的设备。测试物联网应用程序以删除错误目前具有挑战性，因为这些应用程序可能与各种物理设备交互，包括在应用程序开发期间甚至不可用的设备。这项工作将有助于开发有效测试物联网应用程序的技术，并对其运行时行为实施安全和安全约束。更具体地说，拟议的工作围绕三个技术重点：1）创建虚拟设备模型，以帮助系统地有效测试物联网应用程序，而无需提前知道应用程序将控制的物理设备的确切细节; 2）自动化物联网应用程序的测试开发，以针对一组灵活的设备检查安全和安全规范;以及3）在运行时为安全和安全断言的规范执行提供支持。 这项工作包括使用各种设备进行广泛的实验和评估，并将在强化这一重要空间方面取得重大进展

This work examines how to get safety and security in Internet of Things (IoT) systems where multiple devices (things), each designed in isolation from others, are brought together to form a networked system, controlled via one or more software applications ("apps"). "Things" in an IoT environment can include simple devices such as switches, lightbulbs, smart locks, thermostats, and safety alarms as well as complex systems such as appliances, smartphones, and cars. Software IoT "apps" can monitor and control multiple devices in homes, cars, cities, and businesses, providing significant benefits such as energy efficiency, security, safety, and user convenience. Unfortunately, programmable IoT systems also introduce new risks, including enabling remote control by hackers of devices in smart homes, cars, and cities, via buggy IoT apps. Testing IoT apps to remove bugs is currently challenging due to a variety of physical devices with which such apps may interact, including devices that were not even available during app development. The proposed work will help develop techniques for testing IoT apps efficiently and for enforcing safety and security constraints on their run-time behavior.More specifically, the proposed work is centered around three technical thrusts: 1) creating virtual device models to help efficiently test IoT apps systematically without knowing the precise details of physical devices that the apps will control in advance; 2) automating test development for an IoT app to check safety and security specifications against a flexible set of devices; and 3) providing support for enforcement of specifications at run-time for security and safety assertions. The work includes extensive experimentation and evaluation using diverse devices and will represent a significant advance in hardening this important spaces