Shieh Min-Zheng, Lin Yi-Bing, Hsu Yin-Jui
Information Technology Service Center, National Yang Ming Chiao Tung University, Hsinchu 300093, Taiwan.
Department of Computer Science, National Yang Ming Chiao Tung University, Hsinchu 300093, Taiwan.
Sensors (Basel). 2021 Nov 9;21(22):7449. doi: 10.3390/s21227449.
An Internet of Things (IoT) application typically involves implementations in both the device domain and the network domain. In this two-domain environment, it is possible that application developers implement the wrong network functions and/or connect some IoT devices that should never be linked, which result in the execution of wrong operations on network functions. To resolve these issues, we propose the VerificationTalk mechanism to prevent inappropriate IoT application deployment. VerificationTalk consists of two subsystems: the BigraphTalk subsystem which verifies IoT device configuration; and AFLtalk which validates the network functions. VerificationTalk provides mechanisms to conduct online anomaly detection by using a runtime monitor and offline by using American Fuzzy Lop (AFL). The runtime monitor is capable of intercepting potentially harmful data targeting IoT devices. When VerificationTalk detects errors, it provides feedback for debugging. VerificationTalk also assists in building secure IoT applications by identifying security loopholes in network applications. By the appropriate design of the IoTtalk execution engine, the testing capacity of AFLtalk is three times that of traditional AFL approaches.
物联网（IoT）应用通常涉及设备域和网络域的实现。在这种双域环境中，应用程序开发人员可能会实现错误的网络功能和/或连接一些本不应链接的物联网设备，这会导致对网络功能执行错误的操作。为了解决这些问题，我们提出了VerificationTalk机制来防止不适当的物联网应用部署。VerificationTalk由两个子系统组成：用于验证物联网设备配置的BigraphTalk子系统；以及用于验证网络功能的AFLtalk。VerificationTalk提供了通过使用运行时监视器进行在线异常检测和通过使用美国模糊 lop（AFL）进行离线异常检测的机制。运行时监视器能够拦截针对物联网设备的潜在有害数据。当VerificationTalk检测到错误时，它会提供调试反馈。VerificationTalk还通过识别网络应用中的安全漏洞来协助构建安全的物联网应用。通过对IoTtalk执行引擎的适当设计，AFLtalk的测试能力是传统AFL方法的三倍。
