flowfence iot security
play

FlowFence: IoT security Mikal Fourrier Internet of Things - PowerPoint PPT Presentation

Sep 22, 2023 •823 likes •1.02k views

FlowFence: IoT security Mikal Fourrier Internet of Things Interconnection of numerous devices which interacts and exchange data Examples: smart home, smart grid Vague term, like the Cloud 2 Study: Samsung SmartThings

  1. FlowFence: IoT security Mikaël Fourrier

  2. Internet of Things ● Interconnection of numerous devices which interacts and exchange data ● Examples: smart home, smart grid ● Vague term, like the Cloud 2

  3. Study: Samsung SmartThings ● Subscribe: abstraction of the hardware ● Polling ● Access control with a device-level granularity 3

  4. Study: Google Fit ● Wearables-oriented ● Only callbacks ● Access control with scopes – Ex: FITNESS_BODY_READ 4

  5. Study: Android Sensor API ● Events: Motion, Environment, Position ● Callback-based except for Position ● No access control except for Position and heart rate 5

  6. Study: IoT architecture ● Hub ● Cloud 6

  7. Problems with IoT ● Lots of devices → hard to secure ● Very sensitive data: health, home locking, cameras ● Third-party applications have few restrictions: a face-recognition door unlocker can send images to the network 7

  8. FlowFence: basic ideas ● Normal execution environment vs sandbox (Quarantined Modules) ● Use of opaque handles ● Enforce declared data use patterns ● Sandbox treated as a black box 8

  9. API example 9

  10. Publisher examples 10

  11. Taint arithmetic 11

  12. Architecture 12

  13. Sandboxes ● Android process with the “isolatedProcess” flag – Disable all rights except IPC for FlowFence ● Cleaned after QM execution 13

  14. Key-value store ● key → (sensible value, taint) ● Polling easy to implement ● Event channels for callbacks ● Device agnostic 14

  15. Overhead ● 3M/sandbox – reasonable ● 100ms if spare sandboxes – same as network call ● 30M/s bandwidth – the Nest camera uses 1M/s, so should be sufficient 15

  16. Ported applications 16

  17. Weaknesses ● QM could forge keys to leak data – Keys must already exist in the QM ● QM can control it's execution time – Asynchronous execution in future version ● Can't prevent user to approve all ● Over-tainting – Taint bound 17

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

FlowFence: Prac-cal Data Protec-on for Emerging IoT Applica-on Frameworks Earlence Fernandes,

FlowFence: Prac-cal Data Protec-on for Emerging IoT Applica-on Frameworks Earlence Fernandes,

FlowFence: Prac-cal Data Protec-on for Emerging IoT Applica-on Frameworks Earlence Fernandes, Jus/n Paupore, Amir Rahma/, Daniel Simionato, Mauro Con/, Atul Prakash University of Michigan, University of Padova Published at USENIX Security 2016

468 views • 22 slides
FlowFence: A Denial of Service Defense System for Software Defined Networking Andr es Felipe

FlowFence: A Denial of Service Defense System for Software Defined Networking Andr es Felipe

FlowFence: A Denial of Service Defense System for Software Defined Networking Andr es Felipe Murillo Piedrahita and Sandra Rueda Diogo M. F. Mattos and Otto Carlos M. B. Duarte Systems and Computing Engineering Department Grupo de

417 views • 6 slides
What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

Network security Network security Foundations: what is security? cryptography Network Security Network Security authentication message integrity key distribution and certification Security in practice: Srinidhi Varadarajan

332 views • 6 slides
Security Security as term, Possible Security violations Authentication Criteria for

Security Security as term, Possible Security violations Authentication Criteria for

BS1 WS19/20 topic-based slides Security Security as term, Possible Security violations Authentication Criteria for Trust in Computer Systems Three hearts of Windows Security DACLs A Look at Security System is secure if

988 views • 20 slides
CPSC410/611: Security Security Security Attacks Security Threats Crypto

CPSC410/611: Security Security Security Attacks Security Threats Crypto

CPSC 410 / 611 : Operating Systems CPSC410/611: Security Security Security Attacks Security Threats Crypto Authentication Examples SSL Security Threats Breach of confidentiality unauthorized access to

458 views • 18 slides
Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security

Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security

Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security WS 06/07 Seminar Prof. Dr.-Ing. Jana Dittmann & Dr.-Ing. Claus Vielhauer with support from Tobias Scheidat

419 views • 16 slides
1 X.800 Security Services X.800 Security Services X.800 Security Services Data integrity

1 X.800 Security Services X.800 Security Services X.800 Security Services Data integrity

Course Overview Course Requirements EECS 498-7/8 Cryptography and Network Security: www.citi.umich.edu/u/honey/security Principles and Practice (Third Edition) Computer Security Monday & Friday, 9:00 10:30 William Stallings

670 views • 19 slides
A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security

A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security

A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security Introducing Spring Security View layer security Whats coming in Spring Security 3 E-mail: craig@habuma.com Blog: http://www.springloaded.info

452 views • 19 slides
Network Security Network Security Srinidhi Varadarajan Network security Network security

Network Security Network Security Srinidhi Varadarajan Network security Network security

Network Security Network Security Srinidhi Varadarajan Network security Network security Foundations: what is security? cryptography authentication message integrity key distribution and certification Security in practice:

634 views • 36 slides
Security Overview Security Goals The Attack Space Security Mechanisms

Security Overview Security Goals The Attack Space Security Mechanisms

CSCE Intro to Computer Systems Security Security Overview Security Goals The Attack Space Security Mechanisms Introduction to Cryptography Authentication Authorization Confidentiality Case Studies Security

472 views • 20 slides
SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY

SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY

SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY TESTING CONCEPTS 3. SECURITY TESTING TYPES 4. TOP 10 SECURITY RISKS Few Security Breaches Date: 2013-14 September 2016, while in negotiations to

404 views • 18 slides
Security Security with Distributed Systems Why Security? The need for security mechanisms in

Security Security with Distributed Systems Why Security? The need for security mechanisms in

Security Security with Distributed Systems Why Security? The need for security mechanisms in distributed systems arises from the desire to share resources Resources must be protected against unauthorized access, as enemies (attackers)

1.16k views • 67 slides
International and Global Security 1 Peer Discussion What is security? 2 International

International and Global Security 1 Peer Discussion What is security? 2 International

International and Global Security 1 Peer Discussion What is security? 2 International Security What is security? Freedom from threats to core values? Contestation over referent object: Individual? State? System? How is security achieved?

715 views • 11 slides
Security Overview Security Goals The Attack Space Security Mechanisms

Security Overview Security Goals The Attack Space Security Mechanisms

CPSC 410/611 Operating Systems Security Security Overview Security Goals The Attack Space Security Mechanisms Introduction to Cryptography Authentication Authorization Confidentiality Case Studies

419 views • 19 slides
Security 101 Definition of Information Security Information security is the protection of

Security 101 Definition of Information Security Information security is the protection of

Computing Services Information Security Office Security 101 Definition of Information Security Information security is the protection of information and systems from unauthorized access, disclosure, modification, destruction or disruption. The

469 views • 22 slides
Security Update Security Plans Our Security plans are For Official Use Only, Safety

Security Update Security Plans Our Security plans are For Official Use Only, Safety

Security Update Security Plans Our Security plans are For Official Use Only, Safety Sensitive Information Not for public or media release F.S. 119.071. Required by law, rule and regulation: Homeland Security Directive 5 and 8.

393 views • 11 slides
Welcome! Office Hours will start at 2pm and run until 3pm Please mute your microphone As time

Welcome! Office Hours will start at 2pm and run until 3pm Please mute your microphone As time

I-SHARE ALMA PRIMO VE OFFICE HOURS WILL START SHORTLY Welcome! Office Hours will start at 2pm and run until 3pm Please mute your microphone As time permits, we will respond to questions typed in the chat box, and offline afterwards, as needed

432 views • 16 slides
https://bazel.build/ Inputs /usr/bin/cc Action Outputs ./parser.h cc -I. -c parser.c -o

https://bazel.build/ Inputs /usr/bin/cc Action Outputs ./parser.h cc -I. -c parser.c -o

https://bazel.build/ Inputs /usr/bin/cc Action Outputs ./parser.h cc -I. -c parser.c -o parser.o ./parser.o ./parser.c Inputs /usr/bin/cc Action Outputs ./parser.h cc -I. -c parser.c -o parser.o ./parser.o ./parser.c Workspace

206 views • 19 slides
Full-System Architectural Exploration Sandbox Eriko Nurvitadhi and James C. Hoe Computer

Full-System Architectural Exploration Sandbox Eriko Nurvitadhi and James C. Hoe Computer

Full-System Architectural Exploration Sandbox Eriko Nurvitadhi and James C. Hoe Computer Architecture Lab (CALCM) Carnegie Mellon University Nurvitadhi & Hoe, CMU/ECE WARFP 2005, February 2005, Slide 1 Sandbox Desiderata A PC where I

157 views • 4 slides
Talkdesks Modern IVR May 2020 Fernando Santos Product Marketing Manager The information

Talkdesks Modern IVR May 2020 Fernando Santos Product Marketing Manager The information

Talkdesks Modern IVR May 2020 Fernando Santos Product Marketing Manager The information contained in this document is property of Talkdesk and can only be used by the intended recipients. The reproduction or communication of information in

781 views • 11 slides
Utahs s Le Legal Sand ndbox: ox: Data a ta and A d Assess sessmen ent t Tod

Utahs s Le Legal Sand ndbox: ox: Data a ta and A d Assess sessmen ent t Tod

Utahs s Le Legal Sand ndbox: ox: Data a ta and A d Assess sessmen ent t Tod odays s P Plan - Introductions - Update: Task Force and Sandbox status - Overview: Data and Assessment Framework - Open Floor Discussion Our

426 views • 27 slides
October 8-11, 2017 Las Vegas, NV Effective Use of Non-Debtor Third Party Releases Presenters

October 8-11, 2017 Las Vegas, NV Effective Use of Non-Debtor Third Party Releases Presenters

91st Annual National Conference of Bankruptcy Judges October 8-11, 2017 Las Vegas, NV Effective Use of Non-Debtor Third Party Releases Presenters Hon. Margaret M. Mann, U.S. Bankruptcy Court, Southern District of California, Moderator Abid

410 views • 15 slides
A beginners guide to editing Wikipedia A CRUK & Wikimedia UK training module Your

A beginners guide to editing Wikipedia A CRUK & Wikimedia UK training module Your

A beginners guide to editing Wikipedia A CRUK & Wikimedia UK training module Your trainer for today Dr Mike Peel - Lead trainer Astronomer at the Jodrell Bank Centre for Astrophysics, University of Manchester Wikipedian since

544 views • 42 slides
iOS App Extensions Photo Extensions: Shared Settings Separate Sandboxes Extension App Sandbox

iOS App Extensions Photo Extensions: Shared Settings Separate Sandboxes Extension App Sandbox

iOS App Extensions Photo Extensions: Shared Settings Separate Sandboxes Extension App Sandbox Sandbox Shared Container App Group Extension App Sandbox Sandbox Shared Container Shared NSUserDefaults

509 views • 7 slides

More recommend