论文标题
Sereniot：协作网络安全政策管理和智能家居执法
SERENIoT: Collaborative Network Security Policy Management and Enforcement for Smart Homes
论文作者
论文摘要
网络流量白列出已经成为确保消费者IoT设备的主要方法。但是，确定物联网设备的白名单行为应该是一个开放的挑战。迄今为止的提案依靠制造商和受信任的各方提供白名单，但是这些建议要求制造商参与或将信任放在额外的利益相关者中。另外，本地监视设备可以允许构建观察到的行为的白名单，但是在观察期间，设备可能无法耗尽其功能性，或者在需要重新训练的软件更新后，行为可能会改变。本文提出了一个基于区块链的系统，用于确定物联网设备是否像同一类型的其他设备一样行为。我们的系统（Sereniot，明显的宁静）克服了最初确定设备正确行为的挑战。淡淡的公共区块链中的节点提交了针对连接的物联网设备观察到的网络行为的摘要，并建立了大多数节点观察到的行为的白名单。一旦更新被广泛部署，通过软件更新的行为更改将自动列入白名单。通过在小覆盆子Pi IoT网络和大规模的Amazon EC2模拟上实施Sereniot的概念验证实施，我们评估了系统的安全性，可扩展性和性能。
Network traffic whitelisting has emerged as a dominant approach for securing consumer IoT devices. However, determining what the whitelisted behavior of an IoT device should be remains an open challenge. Proposals to date have relied on manufacturers and trusted parties to provide whitelists, but these proposals require manufacturer involvement or placing trust in an additional stakeholder. Alternatively, locally monitoring devices can allow building whitelists of observed behavior, but devices may not exhaust their functionality set during the observation period, or the behavior may change following a software update which requires re-training. This paper proposes a blockchain-based system for determining whether an IoT device is behaving like other devices of the same type. Our system (SERENIoT, pronounced Serenity) overcomes the challenge of initially determining the correct behavior for a device. Nodes in the SERENIoT public blockchain submit summaries of the network behavior observed for connected IoT devices and build whitelists of behavior observed by the majority of nodes. Changes in behavior through software updates are automatically whitelisted once the update is broadly deployed. Through a proof-of-concept implementation of SERENIoT on a small Raspberry Pi IoT network and a large-scale Amazon EC2 simulation, we evaluate the security, scalability, and performance of our system.
