Design Flaws and Deployment Chaos in Cloud-based IoT Access Control Policies
summary
Analyzes actual cloud IoT deployments and finds concrete flaws: policy semantic gap between MQTT topic wildcards and cloud policy semantics lets hashes/plus bypass denies, Cognito guest identities can skip IoT policy checks, and template variables let devices share or steal access. Empirically examines 36 manufacturers and 310 GitHub projects, builds a formal verifier that encodes MQTT filters and wildcard semantics into SMT, tests it on thousands of policies, and reports many realistic exploitable misconfigurations; the verifier is effective and fast.
AI-written summary · about
chapters (8)
- 0:00IoT cloud access flaws
- 1:10Cloud IoT systems and MQTT
- 6:05Semantic gap in IoT policies
- 9:57Cognito and IoT policy issues
- 16:42Policy templates mismatches
- 20:33Policy mutual inclusion constraints
- 24:06Consequences and verification tool
- 30:26Conclusion and Q&A
related talks
39mDilemma in IoT Access Control: Revealing Novel Attacks and Design Challenges in Mobile-as-a-Gateway
35mHow I Can Unlock Your Smart Door: Security Pitfalls in Cross-Vendor IoT Access Control
25mTrust in the edge, trouble in the cloud
42mCloudy With a Chance of Exploits: Compromising Critical Infrastructure Through IIoT Cloud Solutions
31mNext-Gen IoT Botnets 3: Bad Implementations of Good Cloud Platforms- 31mNext-Gen IoT Botnets 3: Bad Implementations of Good Cloud Platforms
37mLocking Down the Security of IAM
10mIoT: End of Shorter Days