• TUCS Publication Series
• How to Publish in TUCS Series
• Publication Search
• Publication Graph
• Publication Input
• Publication Input Guide
• JuFo Browser

Interface Diversification in IoT Operating Systems

Petteri Mäki, Sampsa Rauti, Shohreh Hosseinzadeh, Lauri Koivunen, Ville Leppänen, Interface Diversification in IoT Operating Systems. In: Proceedings of the 9th International Conference on Utility and Cloud Computing, UCC '16, 304–309, ACM, 2016.

http://dx.doi.org/10.1145/2996890.3007877

Abstract:

With the advancement of Internet in Things (IoT) more and more "things" are connected to each other through the Internet. Due to the fact that the collected information may contain personal information of the users, it is very important to ensure the security of the devices in IoT.

Diversification is a promising technique that protects the software and devices from harmful attacks and malware by making interfaces unique in each separate system. In this paper we apply diversification on the interfaces of IoT operating systems. To this aim, we introduce the diversification in post-compilation and linking phase of the software life-cycle, by shuffling the order of the linked objects while preserving the semantics of the code. This approach successfully prevents malicious exploits from producing adverse effects in the system. Besides shuffling, we also apply library symbol diversification method, and construct needed support for it e.g. into the dynamic loading phase.

Besides studying and discussing memory layout shuffling and symbol diversification as a security measures for IoT operating systems, we provide practical implementations for these schemes for Thingsee OS and Raspbian operating systems and test these solutions to show the feasibility of diversification in IoT environments.

BibTeX entry:

@INPROCEEDINGS{inpMxRaHoKoLe16a,
  title = {Interface Diversification in IoT Operating Systems},
  booktitle = {Proceedings of the 9th International Conference on Utility and Cloud Computing},
  author = {Mäki, Petteri and Rauti, Sampsa and Hosseinzadeh, Shohreh and Koivunen, Lauri and Leppänen, Ville},
  series = {UCC '16},
  publisher = {ACM},
  pages = {304–309},
  year = {2016},
  keywords = {IoT, diversification, software security},
}

Belongs to TUCS Research Unit(s): Software Development Laboratory (SwDev)

Publication Forum rating of this publication: level 1

Edit publication