VerificationTalk: A Verification and Security Mechanism for IoT Applications

An Internet of Things (IoT) application typically involves implementations in both the device domain and the network domain. In this two-domain environment, it is possible that application developers implement the wrong network functions and/or connect some IoT devices that should never be linked, w...

Descripción completa

Guardado en:
Detalles Bibliográficos
Autores principales: Min-Zheng Shieh, Yi-Bing Lin, Yin-Jui Hsu
Formato: article
Lenguaje:EN
Publicado: MDPI AG 2021
Materias:
Acceso en línea:https://doaj.org/article/fb2482b5cc654657bf0b1c53f2525432
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
id oai:doaj.org-article:fb2482b5cc654657bf0b1c53f2525432
record_format dspace
spelling oai:doaj.org-article:fb2482b5cc654657bf0b1c53f25254322021-11-25T18:56:32ZVerificationTalk: A Verification and Security Mechanism for IoT Applications10.3390/s212274491424-8220https://doaj.org/article/fb2482b5cc654657bf0b1c53f25254322021-11-01T00:00:00Zhttps://www.mdpi.com/1424-8220/21/22/7449https://doaj.org/toc/1424-8220An Internet of Things (IoT) application typically involves implementations in both the device domain and the network domain. In this two-domain environment, it is possible that application developers implement the wrong network functions and/or connect some IoT devices that should never be linked, which result in the execution of wrong operations on network functions. To resolve these issues, we propose the VerificationTalk mechanism to prevent inappropriate IoT application deployment. VerificationTalk consists of two subsystems: the BigraphTalk subsystem which verifies IoT device configuration; and AFLtalk which validates the network functions. VerificationTalk provides mechanisms to conduct online anomaly detection by using a runtime monitor and offline by using American Fuzzy Lop (AFL). The runtime monitor is capable of intercepting potentially harmful data targeting IoT devices. When VerificationTalk detects errors, it provides feedback for debugging. VerificationTalk also assists in building secure IoT applications by identifying security loopholes in network applications. By the appropriate design of the IoTtalk execution engine, the testing capacity of AFLtalk is three times that of traditional AFL approaches.Min-Zheng ShiehYi-Bing LinYin-Jui HsuMDPI AGarticleAmerican Fuzzy Lop (AFL)bigraph modelsformal methodsfuzz testingInternet of Things (IoT)Chemical technologyTP1-1185ENSensors, Vol 21, Iss 7449, p 7449 (2021)
institution DOAJ
collection DOAJ
language EN
topic American Fuzzy Lop (AFL)
bigraph models
formal methods
fuzz testing
Internet of Things (IoT)
Chemical technology
TP1-1185
spellingShingle American Fuzzy Lop (AFL)
bigraph models
formal methods
fuzz testing
Internet of Things (IoT)
Chemical technology
TP1-1185
Min-Zheng Shieh
Yi-Bing Lin
Yin-Jui Hsu
VerificationTalk: A Verification and Security Mechanism for IoT Applications
description An Internet of Things (IoT) application typically involves implementations in both the device domain and the network domain. In this two-domain environment, it is possible that application developers implement the wrong network functions and/or connect some IoT devices that should never be linked, which result in the execution of wrong operations on network functions. To resolve these issues, we propose the VerificationTalk mechanism to prevent inappropriate IoT application deployment. VerificationTalk consists of two subsystems: the BigraphTalk subsystem which verifies IoT device configuration; and AFLtalk which validates the network functions. VerificationTalk provides mechanisms to conduct online anomaly detection by using a runtime monitor and offline by using American Fuzzy Lop (AFL). The runtime monitor is capable of intercepting potentially harmful data targeting IoT devices. When VerificationTalk detects errors, it provides feedback for debugging. VerificationTalk also assists in building secure IoT applications by identifying security loopholes in network applications. By the appropriate design of the IoTtalk execution engine, the testing capacity of AFLtalk is three times that of traditional AFL approaches.
format article
author Min-Zheng Shieh
Yi-Bing Lin
Yin-Jui Hsu
author_facet Min-Zheng Shieh
Yi-Bing Lin
Yin-Jui Hsu
author_sort Min-Zheng Shieh
title VerificationTalk: A Verification and Security Mechanism for IoT Applications
title_short VerificationTalk: A Verification and Security Mechanism for IoT Applications
title_full VerificationTalk: A Verification and Security Mechanism for IoT Applications
title_fullStr VerificationTalk: A Verification and Security Mechanism for IoT Applications
title_full_unstemmed VerificationTalk: A Verification and Security Mechanism for IoT Applications
title_sort verificationtalk: a verification and security mechanism for iot applications
publisher MDPI AG
publishDate 2021
url https://doaj.org/article/fb2482b5cc654657bf0b1c53f2525432
work_keys_str_mv AT minzhengshieh verificationtalkaverificationandsecuritymechanismforiotapplications
AT yibinglin verificationtalkaverificationandsecuritymechanismforiotapplications
AT yinjuihsu verificationtalkaverificationandsecuritymechanismforiotapplications
_version_ 1718410565081104384