Secure IoT Sensing in Smart Buildings

Project Overview

Funding: 2 Years (2017 ~ 2018)

Partners: TUM (Germany) and UCI (USA)

Description

The idea of an Internet of Things (IoT) gradually finds its way into practical products, with building monitoring and management as one important application area. Such systems comprise various sensors, including "simple" ones for humidity, air quality, and temperature monitoring, but also powerful (and thus potentially more intrusive) ones such as surveillance cameras. In these systems, it is important that administrators can define appropriate data collection regulations and access policies e.g., no audio/video collection during working hours in office spaces that are transparent to users, that users can only access the data they are authorized to see and prevent unauthorized data about themselves.

In this project, we plan to build an auditing framework for IoT systems to achieve these goals. To this end, the team of the University of California, Irvine, has developed a hybrid security monitor that can securely log the state of various I/O operations in ARM-based devices while the TUM team has been setting up a large IoT sensing testbed for data privacy research. Our collaboration will extend the hybrid security monitor to secure log and audit sensor data, and investigate techniques to port the hybrid security monitor to the IoT testbed in TUM. We will leverage virtualization and security mechanisms such as ARM processor TrustZone to build an extensible auditing framework that can securely enforce IoT sensing policies in smart buildings. Through testbed experiments, we will evaluate the framework against various platforms, sensor types and operation environments. The lessons learned from our implementation, deployment and experimentation will shed light on the future development of system solutions to secure IoT sensing.

Publications

• "Demo: Empowering Cyber-Physical Systems with FADEX" (to appear) [Bib & PDF]
  Vittorio Cozzolino, Aaron Yi Ding, Ardalan Amiri Sani, Richard Mortier, Dirk Kutscher, Joerg Ott, ACM MobiSys, 2018
• "Consolidate IoT Edge Computing with Lightweight Virtualization" [Bib & PDF]
  Roberto Morabito, Vittorio Cozzolino, Aaron Yi Ding, Nicklas Beijar, Joerg Ott, IEEE Network, 2018
• "Ditio: Trustworthy Auditing of Sensor Activities in Mobile & IoT Devices" [Bib & PDF]
  Saeed Mirzamohammadi, Justin A. Chen, Ardalan Amiri Sani, Sharad Mehrotra, Gene Tsudik, ACM SenSys, 2017
• "FADES: Fine-Grained Edge Offloading with Unikernels" [Bib & PDF]
  Vittorio Cozzolino, Aaron Yi Ding, Joerg Ott, ACM SIGCOMM HotConNet, 2017
• "Enabling Fine-Grained Edge Offloading for IoT" [Bib & PDF]
  Vittorio Cozzolino, Aaron Yi Ding, Joerg Ott, Dirk Kutscher, ACM SIGCOMM Posters and Demos, 2017
• "Understanding Sensor Notifications on Mobile Devices" [Bib & PDF]
  Zongheng Ma, Saeed Mirzamohammadi, Ardalan Amiri Sani, ACM HotMobile, 2017

Project Members

	Prof. Dr. Jörg Ott Project Co-Leader Chair of Connected Mobility, TUM Homepage
	Dr. Aaron Yi Ding Project Co-Leader Chair of Connected Mobility, TUM Homepage
	Vittorio Cozzolino PhD Researcher Chair of Connected Mobility, TUM Homepage
	Michael Haus PhD Researcher Chair of Connected Mobility, TUM Homepage

	Prof. Ardalan Amiri Sani Project Co-Leader Department of Computer Science, UCI Homepage
	Saeed Mirzamohammadi PhD Researcher Department of Computer Science, UCI Homepage