mobile-iot-security-lab / pariotic Goto Github PK

PARIOTIC (Pervasive Anti-Repackaging for IoT for Integrated C-based Firmware) is the first solution aimed at making IoT firmware self-resistant against repackaging through the whole production and delivery process.

PARIOTIC support the protection of IoT firmware designed in C/C++ programming language. The methodology exploits the use of cryptographically obfuscated logic bombs (CLB) to hide anti-tampering (AT) checks directly in the firmware code.

The tool consists of two modules:

• CLB Injector. This module works directly on the firmware source code and is responsible for parsing the source code, detecting the QCs, and building CLBs.
• CLB Protector. This module processes the compiled IoT firmware, and it is responsible for computing the signature-verification digests of AT checks and encrypting the CLBs

More details can be found in the paper "PARIOTIC: Anti-Repackaging for IoT Firmware Integrity".

We submit it for consideration to Journal of Network and Computer Applications.

You can cite the paper as follows:

@misc{https://doi.org/10.48550/arxiv.2109.04337,
  doi = {10.48550/ARXIV.2109.04337},
  url = {https://arxiv.org/abs/2109.04337},
  author = {Verderame, Luca and Ruggia, Antonio and Merlo, Alessio},
  keywords = {Cryptography and Security (cs.CR), FOS: Computer and information sciences, FOS: Computer and information sciences},
  title = {Anti-Repackaging for IoT Firmware Integrity},
  publisher = {arXiv},
  year = {2021},
  copyright = {arXiv.org perpetual, non-exclusive license}
}

• In the Tools folder, you can find the source code of the CLB Injector and the CLB Protector projects.
• In the Example folder, you can find an usage example and the instruction to reproduce it.

This tool is available under a dual license: a commercial one required for closed source projects or commercial projects, and an AGPL license for open-source projects.

Depending on your needs, you must choose one of them and follow its policies. A detail of the policies and agreements for each license type is available in the LICENSE.COMMERCIAL and LICENSE files.

This software was developed for research purposes at the Computer Security Lab (CSecLab), hosted at DIBRIS, University of Genoa.

• Alessio Merlo - Faculty Member
• Antonio Ruggia - PhD. Student
• Luca Verderame - Assistant Professor