Section: New Software and Platforms

IoTMLT

IoT Modeling Language and tool

Keywords: Internet of things - Modeling language - Cyber attack

Scientific Description: We propose a framework to analyze security in IoT systems consisting of a formal languages for modeling IoT systems and of attack trees for modeling the possible attacks on the system. In our approach a malicious entity is present in the system, called the Attacker. The other IoT entities can inadvertently help the Attacker, by leaking their sensitive data. Equipped with the acquired knowledge the Attacker can then communicate with the IoT entities undetected. The attack tree provided with the model acts as a monitor: It observes the interactions the Attacker has with the system and detects when an attack is successful.

An IoT system is then analyzed using statistical model checking (SMC). The first method we use is Monte Carlo, which consists of sampling the executions of an IoT system and computing the probability of a successful attack based on the number of executions for which the attack was successful. However, the evaluation may be difficult if a successful attack is rare. We therefore propose a second SMC method, developed for rare events, called importance splitting. Both methods are proposed by Plasma, the SMC tool we use.

Functional Description: The IoT modeling language is a formal language and tool for specifying and enforcing security in IoT systems.

• Participants: Delphine Beaulaton, Ioana-Domnina Cristescu and Najah Ben Said

• Partner: Vérimag

• Contact: Delphine Beaulaton

• URL: http://iot-modeling.gforge.inria.fr