Verifying the Application of Security Measures in IoT Software Systems with Model Learning - Université Clermont Auvergne Accéder directement au contenu
Communication Dans Un Congrès Année : 2020

Verifying the Application of Security Measures in IoT Software Systems with Model Learning

Résumé

Most of today's software systems log events to record the events that have occurred in the past. Such logs are particularly useful for auditing security over time. But, the growing sizes and lack of abstraction of the logs make them difficult to interpret manually. This paper proposes an approach combining model learning and model checking to help audit the security of IoT software systems. This approach takes as inputs an event log and generic security measures described with LTL formulas. It generates one formal model for every component of an IoT system and helps auditors make the security measures concrete in order to check if the models satisfy them. The LTL formula instantiation is semi-automatically performed by means of an expert system and inference rules that encode some expert knowledge, which can be applied again to the same kind of systems with less efforts. We evaluate our approach on 3 IoT systems against 11 security measures provided by the European ENISA institute.
Fichier principal
Vignette du fichier
iotverif2.pdf (506.08 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03048356 , version 1 (09-12-2020)

Licence

Paternité

Identifiants

Citer

Sébastien Salva, Elliot Blot. Verifying the Application of Security Measures in IoT Software Systems with Model Learning. 15th International Conference on Software Technologies, Jul 2020, Lieusaint - Paris, France. pp.350-360, ⟨10.5220/0009872103500360⟩. ⟨hal-03048356⟩
103 Consultations
114 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More