Hiding Vulnerabilities of Internet of Things Software Using Anti-Tamper Technique
Ara Hur, Jooeun Kim, Yeonseung Ryu · 2019
With the advancement of Field Programmable Gate Array (FPGA) technology, the Internet of Things (IoT) devices are cheaply equipped with FPGA. In this work, we study a FPGA-based hiding technique of security vulnerabilities which are inevitably residing in the IoT software. When software engineers develop software code and perform static security testing, they could find vulnerabilities which cannot be removed from source code. For example, an IoT device needs to have hard-coded password in the source code in order to communicate with server. The proposed method isolates the parts of the source code that contain the security vulnerability, and then converts them to bitstream of specific FPGA circuit. It is difficult for attackers to find vulnerabilities that are implemented as a hardware circuit such as FPGA.