It is argued that the weakest link in the security chain is now the Internet of Things (IoT) and not the people. Hence, an increasing number of solutions are proposed to secure these devices. Here, we propose a PLuggable And Reprogrammable (PLAR) software architecture for IoT devices with the goal of securing the devices throughout their development and deployment life cycle. PLAR is an open source IoT device software solution composed of re-configurable and re-programmable modules. PLAR's hub enables a device operator to specify security policies detailing specific security functions for an IoT device. Accordingly, after an initial analysis of the device, it may add new compatible modules or upgrade existing ones in real-time. It enables to tune the security capabilities of the device based on requirements of end-users/developers by over-riding the weak configurations. We present PLAR's architecture and showcase its capabilities by discussing different usecases. We also report on our initial feasibility-study, where an IP camera, vulnerable to authentication attacks is reconfigured with an improved authentication module.
Publication classification
E1.1 Full written paper - refereed
Title of proceedings
IoT S&P 2019 : Proceedings of the 2nd International ACM Workshop on Security and Privacy for the Internet-of-Things
Event
Security and Privacy for the Internet-of-Things. Workshop (2019 : 2nd : London, England)