Knox：为智能空间提供安全保障
Knox: Fortifying Smart Spaces With Safety Guarantees
浏览论文内容
中文总结 AI 辅助
Knox是首个支持物联网智能空间安全检查的系统，通过新型安全条款语言与静态安全检查算法，在缩短检查时间的同时保持高安全违规检测准确率。
中文摘要 AI 辅助
智能空间与建筑中的物联网（IoT）设备是一类新兴分布式系统，具有关键安全要求。本文提出Knox，首个支持物联网智能空间安全检查的系统。Knox的贡献包括：（i）安全规范：针对此类智能空间的新型安全条款语言；（ii）静态安全检查：两种用于验证智能空间内多例程安全属性的新静态验证算法。由于该问题为NP难，我们提出并分析了静态问题的新型可解释算法，还给出进一步降低运行时间的优化。基于真实数据集的分析与实验结果表明，Knox相比基线显著缩短了检查时间，同时在检测安全违规方面保持高准确率。
英文摘要
Internet of Things (IoT) devices in smart spaces and buildings are an emerging class of distributed systems with critical safety requirements. This paper presents Knox, the first system to enable safety checking in IoT-enabled smart spaces. Knox's contributions include (i) safety specifications: a new language for safety clauses in such smart spaces, and (ii) static safety checking: two new algorithms for static verification of multiple safety properties across multiple routines running inside a smart space. Since the latter problem is NP-hard, we present and analyze novel and explainable algorithms for the static version of the problem. We also present optimizations that further reduce runtime. Our analysis and experimental results with real datasets show that Knox reduces checking time significantly compared to baselines, while providing high accuracy in catching safety violations.
