IoT | Nils Ole Tippenhauer

ASRIOT: Automated Security Analysis of RTOS- and MCU-based IoT Firmware

Tue, 01 Aug 2023 00:00:00 +0000

Full title: Automatisierte Sicherheitsanalyse von RTOS und MCU basierter IoT Firmware

Funding: Federal Ministry of Education and Research (BMBF, now BMFTR), grant no. 16KIS1901
Lead institution: CISPA Helmholtz Center for Information Security
My affiliation: CISPA Helmholtz Center for Information Security
Duration: 08/2023-06/2026
Role: Project coordinator and PI

Many IoT devices run firmware on microcontrollers, often based on real-time operating systems, which is difficult to analyse without the original hardware. ASRIOT developed methods to analyse such firmware automatically. The project combined emulation of firmware without the target hardware (rehosting) with fuzzing to find vulnerabilities at scale. The goal was to make security testing of MCU- and RTOS-based firmware practical for researchers and manufacturers.

Partners:

ZF Friedrichshafen AG
ONEKEY GmbH
Fraunhofer Institute for Applied and Integrated Security (AISEC)

ReSILIoT: Research and Security Innovation Lab for Internet of Things

Tue, 01 Sep 2015 00:00:00 +0000

Funding: Ministry of Defence, Singapore
Lead institution: Singapore University of Technology and Design (SUTD)
My affiliation: Singapore University of Technology and Design (SUTD)
Duration: 09/2015-07/2018
Role: Co-PI (own work packages and staff)

ReSILIoT investigated threats posed by and to IoT devices in enterprise and urban environments. Work included identifying IoT devices from their network and wireless traffic, detecting privacy threats from nearby devices, and observing attacks with scalable IoT honeypots. The project also developed host-based anomaly detection for resource-constrained IoT devices and testbeds for evaluating wearable devices.

NSE: National Science Experiment

Sun, 01 Feb 2015 00:00:00 +0000

Funding: National Research Foundation, Singapore
Lead institution: Singapore University of Technology and Design (SUTD)
My affiliation: Singapore University of Technology and Design (SUTD)
Duration: 02/2015-12/2017
Role: Co-PI

The National Science Experiment introduced school students in Singapore to data-driven science. The team developed a wearable sensor platform within less than a year, had 50,000 units produced, and built the cloud infrastructure and a web application for exploring the data. Students carried the sensors for a week while they recorded environmental measurements, and then analysed their own data. The experiment ran in 2015, 2016 and 2017 and involved more than 94,000 students in total.