IoT Fuzzing using AGAPIA and the River Framework

Eduard Stăniloiu, Rares Cristea, Bogdan Ghimis

2021

Abstract

As the number of Internet of Things (IoT) systems continues to grow, so does the security risk imposed by interconnecting heterogeneous devices from different vendors. Testing and validating the security of IoT systems is difficult, especially due to the fact that most of the software is proprietary (closed-source) and the system’s embedded nature makes it hard to collect data, such as memory corruptions. This paper proposes to extend the novel AGAPIA language to enable IoT developers to write safer programs that can be tested and validated with state of the art fuzzers, such as RiverIoT. We present how simple additions can enable AGAPIA modules to be integrated with the RiverIoT architecture, thus facilitating better device testing. The proposed approach also enables users, not just developers, to perform system wide, black-box, testing, increasing the reliability of the system. We show how the abstractions provided by the AGAPIA language enable the fast development of an Air Quality Monitoring application and how small additions to existing programming languages can improve the testing and validation of IoT systems.

Paper Citation

in Harvard Style

Stăniloiu E., Cristea R. and Ghimis B. (2021). IoT Fuzzing using AGAPIA and the River Framework. In Proceedings of the 16th International Conference on Software Technologies - Volume 1: ICSOFT, ISBN 978-989-758-523-4, pages 324-332. DOI: 10.5220/0010604503240332

in Bibtex Style

@conference{icsoft21,
author={Eduard Stăniloiu and Rares Cristea and Bogdan Ghimis},
title={IoT Fuzzing using AGAPIA and the River Framework},
booktitle={Proceedings of the 16th International Conference on Software Technologies - Volume 1: ICSOFT,},
year={2021},
pages={324-332},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0010604503240332},
isbn={978-989-758-523-4},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 16th International Conference on Software Technologies - Volume 1: ICSOFT,
TI - IoT Fuzzing using AGAPIA and the River Framework
SN - 978-989-758-523-4
AU - Stăniloiu E.
AU - Cristea R.
AU - Ghimis B.
PY - 2021
SP - 324
EP - 332
DO - 10.5220/0010604503240332