Principles of Secure BootStrapping for IoT

PI(s), Co-PI(s), Researchers:

PI: Ninghui Li

HARD PROBLEM(S) ADDRESSED
This refers to Hard Problems, released November 2012.

Policy.

PUBLICATIONS
Papers written as a result of your research from the current quarter only.

The two papers below were listed as accepted in the last report. They have been presented and published now.

• Sze Yiu Chau, Moosa Yahyazadeh, Omar Chowdhury, Aniket Kate, Ninghui Li. Analyzing Semantic Correctness with Symbolic Execution: A Case Study on PKCS#1 v1.5 Signature Verification. Proceedings of 2019 NDSS.
• Syed Rafiul Hussain, Mitziu Echeverria, Omar Chowdhury, Ninghui Li and Elisa Bertino. Privacy Attacks to the 4G and 5G Cellular Paging Protocols Using Side Channel Information. Proceedings of 2019 NDSS.

KEY HIGHLIGHTS

• We analyzed Zigbee Light Link (ZLL) and Zigbee Home Automation (ZHA) protocols and tested devices belong to Philips and Samsung Smartthings systems. For this purpose, we set up a testbed with a universal software-defined radio peripheral (USRP) and open source ZigBee stacks. We performed previously explored attacks [1] against smart light to realize the vulnerabilities and the corresponding root causes.

COMMUNITY ENGAGEMENTS

EDUCATIONAL ADVANCES: