Firmware Secure Updates Meet Formal Verification

doi:10.1145/3754455

2026-01-01

PRE

DOI：10.1145/3754455

原文求助

摘要

En 中文

工业物联网(IIoT)系统需要稳健的安全固件更新机制。现有方法因供应商碎片化、网络限制以及许多IIoT应用的安全关键特性而往往不足。本文通过扩展IETF SUIT（物联网软件更新）框架来应对这些挑战，以增强固件更新的安全性和保障性。我们的贡献包括将软件物料清单(SBOM)机制和行为认证清单集成到SUIT架构中，以提高透明度并提供关于更新内容的正式保证。该方法通过原型实现进行验证，使用真实世界基准展示了其可行性和可扩展性。

Keyword:

Secure Update

IIoT

Systems Security

Firmware Distribution

Formal Methods

SBOM

期刊

ACM Transactions on Cyber-Physical Systems

IF:

2.9

论文数:

被引数:

687

机构

university of trento

学者数:

1.8K

论文数: 940

被引数: 0

引用论文

UpKit: An Open-Source, Portable, and Lightweight Update Framework for Constrained IoT Devices

2019 IEEE 39th International Conference on Distributed Computing Systems (ICDCS)

IF0

2019-07-01

PREAI

Antonio Langiu; Carlo Alberto Boano; Markus Schuss; Kay Romer

A Multi-Level DDoS Mitigation Framework for the Industrial Internet of Things

IEEE COMMUNICATIONS MAGAZINE

IF8.2

2018-02-01

127

PREAI

Yan, Qiao; Huang, Wenyao; Luo, Xupeng; Gong, Qingxiang; Yu, F. Richard

A Large-Scale Analysis of IoT Firmware Version Distribution in the Wild

IEEE TRANSACTIONS ON SOFTWARE ENGINEERING

IF5.6

2023-02-01

OAAI

Ebbers, Frank

IF0

PREAI

Internet of Things: Over-the-Air (OTA) firmware update in Lightweight mesh network protocol for smart urban development

2016 22nd Asia-Pacific Conference on Communications (APCC)

IF0

2016-08-01

PREAI

Hans Chandra; Erwin Anggadjaja; Pranata Setya Wijaya; Edy Gunawan

Translation validation

Lecture Notes in Computer Science

IF0

2006-05-25

OAAI

A. Pnueli; M. Siegel; E. Singerman

Survivable key compromise in software update systems

Proceedings of the 17th ACM conference on Computer and communications security

IF0

2010-10-04

OAAI

Justin Samuel; Nick Mathewson; Justin Cappos; Roger Dingledine

SxC4IoT: A Security-by-contract Framework for Dynamic Evolving IoT Devices

ACM TRANSACTIONS ON SENSOR NETWORKS

IF4.7

2021-10-05

OAAI

Giaretta, Alberto; Dragoni, Nicola; Massacci, Fabio

Translation validation for an optimizing compiler

Proceedings of the ACM SIGPLAN 2000 conference on Programming language design and implementation

IF0

2000-05-01

PREAI

George C. Necula

Generating and Exploiting Automated Reasoning Proof Certificates

COMMUNICATIONS OF THE ACM

IF12.2

2023-09-22

PREAI

Barbosa, Haniel; Barrett, Clark; Cook, Byron; Dutertre, Bruno; Kremer, Gereon; Lachnitt, Hanna; Niemetz, Aina; Notzli, Andres; Ozdemir, Alex; Preiner, Mathias; Reynolds, Andrew; Tinelli, Cesare; Zohar, Yoni

查看更多内容