iMRC: Integrated monitoring and recovery component, a solution to guarantee the security of embedded systems - CEA - Université Paris-Saclay
Article Dans Une Revue Journal of Internet Services and Information Security Année : 2022

iMRC: Integrated monitoring and recovery component, a solution to guarantee the security of embedded systems

Résumé

In recent years, the security of connected objects has become a real challenge. Indeed, more and more IoT devices are being built for increasingly critical applications and as shown by multiple famous botnet attacks such as Mirai, IoT devices are often poorly protected. In this paper, we introduce a new solution called iMRC (integrated Monitoring & Recovery Component) to improve the resilience of embedded systems in case of proven attacks. This innovative solution integrates a hardware component whose main function is to extract the hardware performance counters of the processor in order to be analyzed by the artificial intelligence of the control server. This one is able to remotely restore the devices to a known secure state upon detection of malwares or other abnormal behaviors. We define a use case based on a home automation network in which the iMRC component is added to a gateway. We implement a set of scripts reproducing malicious behaviors in order to test our detection capabilities and show that all malwares are detected within less than 20 seconds after the launch of a malware execution
Fichier principal
Vignette du fichier
jisis22.pdf (5.97 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

cea-04072866 , version 1 (11-12-2024)

Licence

Identifiants

Citer

Pierre-Henri Thevenon, Sébastien Riou, Duc-Minh Tran, Maxime Puys, Nikolaos Polychronou, et al.. iMRC: Integrated monitoring and recovery component, a solution to guarantee the security of embedded systems. Journal of Internet Services and Information Security, 2022, 12 (2), pp.1-24. ⟨10.22667/JISIS.2022.05.31.070⟩. ⟨cea-04072866⟩
48 Consultations
0 Téléchargements

Altmetric

Partager

More