Don't talk unless i say so! securing the internet of things with default-off networking

James Hong, Amit Levy, Laurynas Riliskis, Philip Levis

Research output: Chapter in Book/Report/Conference proceedingConference contribution

4 Scopus citations

Abstract

The Internet of Things (IoT) is changing the way we interact with everyday objects. 'Smart' devices will reduce energy use, keep our homes safe, and improve our health. However, as recent attacks have shown, these devices also create tremendous security vulnerabilities in our computing networks. Securing all of these devices is a daunting task. In this paper, we argue that IoT device communications should be default-off and desired network communications must be explicitly enabled. Unlike traditional networked applications or devices like a web browser or PC, IoT applications and devices serve narrowly defined purposes and do not require access to all services in the network. Our proposal, Bark, a policy language and runtime for specifying and enforcing minimal access permissions in IoT networks, exploits this fact. Bark phrases access control policies in terms of natural questions (who, what, where, when, and how) and transforms them into transparently enforceable rules for IoT application protocols. Bark can express detailed rules such as 'Let the lights see the luminosity of the bedroom sensor at any time' and 'Let a device at my front door, if I approve it, unlock my smart lock for 30 seconds' in a way that is presentable and explainable to users. We implement Bark for Wi-Fi/IP and Bluetooth Low Energy (BLE) networks and evaluate its efficacy on several example applications and attacks.

Original languageEnglish (US)
Title of host publicationProceedings - ACM/IEEE International Conference on Internet of Things Design and Implementation, IoTDI 2018
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages117-128
Number of pages12
ISBN (Electronic)9781538663127
DOIs
StatePublished - May 25 2018
Externally publishedYes
Event3rd ACM/IEEE International Conference on Internet of Things Design and Implementation, IoTDI 2018 - Orlando, United States
Duration: Apr 17 2018Apr 20 2018

Publication series

NameProceedings - ACM/IEEE International Conference on Internet of Things Design and Implementation, IoTDI 2018

Other

Other3rd ACM/IEEE International Conference on Internet of Things Design and Implementation, IoTDI 2018
CountryUnited States
CityOrlando
Period4/17/184/20/18

All Science Journal Classification (ASJC) codes

  • Computer Networks and Communications
  • Hardware and Architecture
  • Computer Science Applications

Keywords

  • Internet of Things
  • Network security

Fingerprint Dive into the research topics of 'Don't talk unless i say so! securing the internet of things with default-off networking'. Together they form a unique fingerprint.

Cite this