Proceedings of the 2021 Workshop on Descriptive Approaches to IoT Security, Network, and Application Configuration最新文献

Towards a behavioral description of cyber-physical systems using the thing description 用物描述来描述网络物理系统的行为

Proceedings of the 2021 Workshop on Descriptive Approaches to IoT Security, Network, and Application Configuration Pub Date : 2021-12-07 DOI: 10.1145/3488661.3494030

Farid Salama, Ege Korkan, Sebastian Käbisch, S. Steinhorst

引用次数: 0

Trustworthy things 值得信赖的东西

Proceedings of the 2021 Workshop on Descriptive Approaches to IoT Security, Network, and Application Configuration Pub Date : 2021-12-07 DOI: 10.1145/3488661.3494034

H. Birkholz, T. Fossati

引用次数: 0

PARVP PARVP

Proceedings of the 2021 Workshop on Descriptive Approaches to IoT Security, Network, and Application Configuration Pub Date : 2021-12-07 DOI: 10.1145/3488661.3494031

Jay Anand, Arunan Sivanathan, Ayyoob Hamza, H. Gharakheili

{"title":"PARVP","authors":"Jay Anand, Arunan Sivanathan, Ayyoob Hamza, H. Gharakheili","doi":"10.1145/3488661.3494031","DOIUrl":"https://doi.org/10.1145/3488661.3494031","url":null,"abstract":"Networked cameras continue to be an attractive target of cyber-attacks and therefore present huge risks to organizations. The use of vulnerable credentials (manufacturers default or publicly known) by these devices remains a primary concern for network and cybersecurity teams. This paper aims to assist enterprise network operators to systematically and passively assess the risk of using default credentials or vulnerable authentication schemes for directly accessing connected cameras. Our contributions are two-fold: (1) We analyze HTTP traffic traces of enterprise-grade network cameras (sourced from popular manufacturers including Cisco, Axis, and Pelco), identify the signature of their authentication techniques, including Basic, regular Digest, and Web Service Security (WSS), extracted from request packets, and develop a system with an algorithm (PARVP) for automatic and passive assessment of authentication risks; and (2) We apply PARVP to traffic traces of about 1.4 million HTTP authentication sessions selectively collected from network traffic of more than 1000 cameras (in our university campus network) during three weeks, and draw insights into risks, including cameras that accept default passwords (though hashed) and camera controllers that reveal passwords (though obsolete) by insecure authentication.","PeriodicalId":300781,"journal":{"name":"Proceedings of the 2021 Workshop on Descriptive Approaches to IoT Security, Network, and Application Configuration","volume":"51 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-12-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124894750","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

Operating large-scale IoT systems through declarative configuration APIs 通过声明式配置api操作大规模物联网系统

Proceedings of the 2021 Workshop on Descriptive Approaches to IoT Security, Network, and Application Configuration Pub Date : 2021-12-07 DOI: 10.1145/3488661.3494033

R. Kandoi, K. Hartke

引用次数: 0

IPC evolution thru declarative interface generation 通过声明式接口生成IPC演进

Proceedings of the 2021 Workshop on Descriptive Approaches to IoT Security, Network, and Application Configuration Pub Date : 2021-12-07 DOI: 10.1145/3488661.3494032

Nik Sultana, Saket, A. Zhao, Shubhendra Pal Singhal, Michael Kaplan, R. Krishnan, B. T. Loo

{"title":"IPC evolution thru declarative interface generation","authors":"Nik Sultana, Saket, A. Zhao, Shubhendra Pal Singhal, Michael Kaplan, R. Krishnan, B. T. Loo","doi":"10.1145/3488661.3494032","DOIUrl":"https://doi.org/10.1145/3488661.3494032","url":null,"abstract":"Inter-Process Communication (IPC) mechanisms are simple, OS-provided communication endpoints that do not typically accommodate program-level needs on latency, resource utilization, and mobility. But modern network-connected devices, particularly in IoT, have a wide variety of custom needs and frugal capabilities that standard networking stacks and programming interfaces do not cater for well. Thus IPC needs to evolve, but programmers would need to commit to new communication choices through their source code, which is difficult to change. This position paper argues for the reimagining of IPC to benefit IoT through program-level tailoring of composable and reusable protocol building-blocks for computation-and data-management in distributed systems. We propose sprockets, a generalization of RPC beyond marshalling and synchronization. It incorporates programmer annotations about code semantics, program-level network-related functions, and performance expectations. This is a stepping stone towards the declarative synthesis of high-level IPC that better meets the program's communication needs.","PeriodicalId":300781,"journal":{"name":"Proceedings of the 2021 Workshop on Descriptive Approaches to IoT Security, Network, and Application Configuration","volume":"85 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-12-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127473810","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0