Presentation
Finding Behavior Bugs in IoT Messaging Protocols with Automated Oracle Generation and Monitoring
DescriptionIoT messaging protocols face critical security risks from behavior bugs - specification violations that enable unauthorized data access and device compromise. Detecting such bugs requires comprehensive understanding of protocol specifications and communication semantics. This paper introduces ARES, a fully automated framework that extracts executable behavior oracles from protocol specifications for real-time compliance monitoring using LLM-driven behavior filtering. ARES evaluates six widely-used IoT protocol implementations, identifying 25 new bugs with 87.5% precision, including 21 behavior bugs. Of these, 18 have been confirmed or fixed and 10 CVEs assigned due to their severity.
Event Type
Research Manuscript
TimeWednesday, July 2912:00pm - 12:15pm PDT
LocationMtg Room 202C