Name
Abstract | ||
|---|---|---|
Data Distribution Service (DDS) is a realtime peer-to-peer protocol that serves as a scalable middleware between distributed networked systems found in many Industrial IoT domains such as automotive, medical, energy, and defense. Since the initial ratification of the standard, specifications have introduced a Security Model and Service Plugin Interface (SPI) architecture, facilitating authenticated encryption and data centric access control while preserving interoperable data exchange. However, as Secure DDS v1.1, the default plugin specifications presently exchanges digitally signed capability lists of both participants in the clear during the crypto handshake for permission attestation; thus breaching confidentiality of the context of the connection. In this work, we present an attacker model that makes use of network reconnaissance afforded by this leaked context in conjunction with formal verification and model checking to arbitrarily reason about the underlying topology and reachability of information flow, enabling targeted attacks such as selective denial of service, adversarial partitioning of the data bus, or vulnerability excavation of vendor implementations. |
Year | DOI | Venue |
|---|---|---|
2019 | 10.1109/EuroSPW.2019.00013 | 2019 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) |
Keywords | Field | DocType |
Data Distribution Service,IoT Protocol,Security,Network Reconnaissance,Formal Verification | Middleware,Permission,Data exchange,Data Distribution Service,Computer science,Computer network,Access control,Authenticated encryption,Computer security model,Formal verification | Conference |
ISSN | ISBN | Citations |
Workshop on Software Security for Internet of Things (SSIoT) at
IEEE EuroS&P 2019 | 978-1-7281-3027-9 | 0 |
PageRank | References | Authors |
0.34 | 5 | 7 |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Ruffin White | 1 | 3 | 2.75 |
| Gianluca Caiazza | 2 | 1 | 1.71 |
| Chenxu Jiang | 3 | 0 | 0.34 |
| Xinyue Ou | 4 | 0 | 0.34 |
| Zhiyue Yang | 5 | 0 | 0.34 |
| Agostino Cortesi | 6 | 791 | 66.19 |
| Henrik I. Christensen | 7 | 2848 | 235.82 |