Visible to the public Polyglot CerberOS: Resource Security, Interoperability and Multi-Tenancy for IoT Services on a Multilingual Platform

TitlePolyglot CerberOS: Resource Security, Interoperability and Multi-Tenancy for IoT Services on a Multilingual Platform
Publication TypeConference Paper
Year of Publication2018
AuthorsAkkermans, Sven, Crispo, Bruno, Joosen, Wouter, Hughes, Danny
Conference NameProceedings of the 15th EAI International Conference on Mobile and Ubiquitous Systems: Computing, Networking and Services
PublisherACM
Conference LocationNew York, NY, USA
ISBN Number978-1-4503-6093-7
Keywordscomposability, expandability, Internet of Things, interoperability, pubcrawl, Resiliency, security, Services
AbstractThe Internet of Things (IoT) promises to tackle a range of environmental challenges and deliver large efficiency gains in industry by embedding computational intelligence, sensing and control in our physical environment. Multiple independent parties are increasingly seeking to leverage shared IoT infrastructure, using a similar model to the cloud, and thus require constrained IoT devices to become microservice-hosting platforms that can securely and concurrently execute their code and interoperate. This vision demands that heterogeneous services, peripherals and platforms are provided with an expanded set of security guarantees to prevent third-party services from hijacking the platform, resource-level access control and accounting, and strong isolation between running processes to prevent unauthorized access to third-party services and data. This paper introduces Polyglot CerberOS, a resource-secure operating system for multi-tenant IoT devices that is realised through a reconfigurable virtual machine which can simultaneously execute interoperable services, written in different languages. We evaluate Polyglot CerberOS on IETF Class-1 devices running both Java and C services. The results show that interoperability and strong security guarantees for multilingual services on multi-tenant commodity IoT devices are feasible, in terms of performance and memory overhead, and transparent for developers.
URLhttp://doi.acm.org/10.1145/3286978.3286997
DOI10.1145/3286978.3286997
Citation Keyakkermans_polyglot_2018