Faculty Advisor

Shue, Craig A.

Abstract

As consumer home automation devices are gaining popularity, more examples exist of these devices being compromised at scale to create large botnets. In this paper, we present Soteria, a specification based IDS/IPS with the aim of reducing the spread and impact of IoT botnets by blocking malicious outbound traffic from a compromised device. We demonstrate Soteria's ability to block specification-violating network traffic from IoT devices and to alert an IoT device's manufacturer and owner when the device violates a policy. Furthermore, Soteria's ability to alert the manufacturer of compromised IoT devices gives manufacturers increased awareness of vulnerabilities being exploited in the wild. We expect that with adoption, Soteria will help limit the spread and impact of IoT botnets.

Publisher

Worcester Polytechnic Institute

Date Accepted

2020-04-02

Major

Computer Science

Project Type

Major Qualifying Project

Accessibility

Unrestricted

Advisor Department

Computer Science

Share

COinS