Verifying the Application of Security Measures in IoT Software Systems with Model Learning - Université Clermont Auvergne Access content directly
Conference Papers Year :

Verifying the Application of Security Measures in IoT Software Systems with Model Learning

Abstract

Most of today's software systems log events to record the events that have occurred in the past. Such logs are particularly useful for auditing security over time. But, the growing sizes and lack of abstraction of the logs make them difficult to interpret manually. This paper proposes an approach combining model learning and model checking to help audit the security of IoT software systems. This approach takes as inputs an event log and generic security measures described with LTL formulas. It generates one formal model for every component of an IoT system and helps auditors make the security measures concrete in order to check if the models satisfy them. The LTL formula instantiation is semi-automatically performed by means of an expert system and inference rules that encode some expert knowledge, which can be applied again to the same kind of systems with less efforts. We evaluate our approach on 3 IoT systems against 11 security measures provided by the European ENISA institute.
Fichier principal
Vignette du fichier
iotverif2.pdf (506.08 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03048356 , version 1 (09-12-2020)

Licence

Attribution

Identifiers

Cite

Sébastien Salva, Elliot Blot. Verifying the Application of Security Measures in IoT Software Systems with Model Learning. 15th International Conference on Software Technologies, Jul 2020, Lieusaint - Paris, France. pp.350-360, ⟨10.5220/0009872103500360⟩. ⟨hal-03048356⟩
77 View
90 Download

Altmetric

Share

Gmail Facebook Twitter LinkedIn More