A method and device for security verification of a smart home Internet of Things system under attack

Abstract

The invention discloses a method and a device for security verification of a smart home internet of things system being attacked. The present invention constructs a finite state machine model according to device description information and IFTTT rules, constructs a formalized protocol according to a preset protocol template and input parameters, and then uses a model checking tool to verify the correctness of the finite state machine model whether it satisfies the formalized protocol , find out the smart home devices and related IFTTT rules that cause the system to be unsafe through the counterexample path of the output of the model checking tool. When constructing the finite state machine model, the state parameter of whether each smart home device is attacked is introduced, and the attack intensity parameter is introduced globally when the formal specification is constructed. Among them, the attack intensity is the number of smart home devices under attack. The present invention verifies whether the smart home Internet of Things system is safe when it is attacked by common external networks through the introduction of the status parameter of whether it is attacked or not and the attack intensity parameter.

Description

technical field [0001] The invention relates to the security evaluation and verification of the smart home Internet of things system. Background technique [0002] Smart home devices are limited by capacity and resources, and there are many security holes, and after many devices leave the factory, their built-in operating systems will not be changed or supervised. Therefore, smart home devices are more vulnerable to external network attacks than traditional computer smart home devices. Common forms of attack include information leakage, device imitation, DoS attack, etc. The final attack result is reflected in the control of the data of the sensor device and the destruction of the data link connecting the device. Therefore, the smart home system not only provides users with diverse and powerful functions, but also provides hackers with new possibilities. It may even happen without the user's knowledge. [0003] On the other hand, with the increase in the number and types o...

AI Technical Summary

Problems solved by technology

The situation when smart home devices are attacked by external networks is further complicated by the uncertainty of IFTTT rules

Therefore, ordinary methods cannot verify the security of smart home systems

Images