一種與許安全更新IoT設備允許名單的機制;A Secure Mechanism to Prevent an IoT Device from Executing Non-allowed Operations

NCU Institutional Repository > 資訊電機學院 > 資訊工程研究所 > 博碩士論文 > Item 987654321/89765

jsp.display-item.identifier=請使用永久網址來引用或連結此文件: http://ir.lib.ncu.edu.tw/handle/987654321/89765

题名:	一種與許安全更新IoT設備允許名單的機制;A Secure Mechanism to Prevent an IoT Device from Executing Non-allowed Operations
作者:	王顥鈞;Wang, Hao-Jyun
贡献者:	資訊工程學系
关键词:	物聯網;白名單;允許名單;安全;IoT;allowlist;security
日期:	2022-07-19
上传时间:	2022-10-04 11:58:45 (UTC+8)
出版者:	國立中央大學
摘要:	隨著工業4.0的發展與應用，工廠普遍建置物聯網裝置，然而物聯網裝置與電腦資訊系統設備於資訊安全的防護上，仍多以電腦資訊為主，物聯網裝置現行資安防護較為缺乏，因此如何避免物聯網裝置成為資安攻擊者進入工廠內部網路的入口，以及避免成為攻擊其他資訊設備的裝置，為物聯網裝置應有的資安措施。;Allowlist is an approach that is widely used to protect IoT devices from the execution of malware. Along with the need for IoT devices to adjust their work, the requirement that a allowlist can be adjusted dynamically also emerges. Hence, this requirement also brings security issues about how to protect a allowlist and make a modification securely. After all, without appropriate protection, the allowlist of a compromised IoT devices can be modified by malware executing in the IoT device. The malware may even have root privilege. We propose a kernel based mechanism to protect the allowlist of an IoT device. Our approach allows the allowlist of an IoT device to be updated dynamically. Meanwhile, it disallows malware to change the allowlist, no matter what privilege a piece of malware has. Experimental results show that our system can effectively protect the allowlist of an IoT devices with low performance overhead.
显示于类别:	[資訊工程研究所] 博碩士論文

文件中的档案:

档案	描述	大小	格式	浏览次数
index.html		0Kb	HTML	51	检视/开启

在NCUIR中所有的数据项都受到原著作权保护.

社群 sharing

数据加载中.....