SmartCrowd: Decentralized and automated incentives for distributed IoT system detection

Bo Wu, Ke Xu, Qi Li, Zhuotao Liu, Yih Chun Hu, Zhichao Zhang, Xinle Du, Bingyang Liu, Shoushou Ren

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

Internet of Things (IoT) devices achieve the rapid development and have been widely deployed recently. Meanwhile, inherent vulnerabilities of IoT systems (including firmware and software) have been continually uncovered and thus the systems are always exposed to various attacks. The root cause of the issue is that IoT systems always have design flaws and implementation bugs. In particular, the released systems (e.g., by third-party marketplaces and IoT vendors) may be maliciously repackaged with malware. Unfortunately, IoT consumers are not able to effectively capture such vulnerabilities because of the limited detection capabilities. In this paper, we propose SmartCrowd, a blockchain-based platform that aims to outsource security detection of IoT systems to distributed detectors with strong detection incentives. SmartCrowd enables built-in accountability for IoT providers and authoritative references of detection results for IoT consumers. By building smart contracts, we can incentivize the efficient and high-coverage security detection of IoT systems, while providing decentralized and automated incentives for both IoT providers releasing secure IoT systems and detectors uncovering vulnerabilities. We present the security and theoretical analysis that demonstrates the security of SmartCrowd and the incentives for participators. We prototype SmartCrowd by using Ethereum and the experimental results show that SmartCrowd has both technical feasibility and financial benefits, which can be applied to build a secure IoT ecosystem.

Original languageEnglish (US)
Title of host publicationProceedings - 2019 39th IEEE International Conference on Distributed Computing Systems, ICDCS 2019
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages1106-1116
Number of pages11
ISBN (Electronic)9781728125190
DOIs
StatePublished - Jul 2019
Event39th IEEE International Conference on Distributed Computing Systems, ICDCS 2019 - Richardson, United States
Duration: Jul 7 2019Jul 9 2019

Publication series

NameProceedings - International Conference on Distributed Computing Systems
Volume2019-July

Conference

Conference39th IEEE International Conference on Distributed Computing Systems, ICDCS 2019
CountryUnited States
CityRichardson
Period7/7/197/9/19

Fingerprint

Internet of things
Detectors
Intelligent buildings
Firmware
Ecosystems
Computer systems
Defects
Malware

Keywords

  • Automation
  • Blockchain
  • Decentralization
  • Incentives
  • IoT System Detection

ASJC Scopus subject areas

  • Software
  • Hardware and Architecture
  • Computer Networks and Communications

Cite this

Wu, B., Xu, K., Li, Q., Liu, Z., Hu, Y. C., Zhang, Z., ... Ren, S. (2019). SmartCrowd: Decentralized and automated incentives for distributed IoT system detection. In Proceedings - 2019 39th IEEE International Conference on Distributed Computing Systems, ICDCS 2019 (pp. 1106-1116). [8884853] (Proceedings - International Conference on Distributed Computing Systems; Vol. 2019-July). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ICDCS.2019.00113

SmartCrowd : Decentralized and automated incentives for distributed IoT system detection. / Wu, Bo; Xu, Ke; Li, Qi; Liu, Zhuotao; Hu, Yih Chun; Zhang, Zhichao; Du, Xinle; Liu, Bingyang; Ren, Shoushou.

Proceedings - 2019 39th IEEE International Conference on Distributed Computing Systems, ICDCS 2019. Institute of Electrical and Electronics Engineers Inc., 2019. p. 1106-1116 8884853 (Proceedings - International Conference on Distributed Computing Systems; Vol. 2019-July).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Wu, B, Xu, K, Li, Q, Liu, Z, Hu, YC, Zhang, Z, Du, X, Liu, B & Ren, S 2019, SmartCrowd: Decentralized and automated incentives for distributed IoT system detection. in Proceedings - 2019 39th IEEE International Conference on Distributed Computing Systems, ICDCS 2019., 8884853, Proceedings - International Conference on Distributed Computing Systems, vol. 2019-July, Institute of Electrical and Electronics Engineers Inc., pp. 1106-1116, 39th IEEE International Conference on Distributed Computing Systems, ICDCS 2019, Richardson, United States, 7/7/19. https://doi.org/10.1109/ICDCS.2019.00113
Wu B, Xu K, Li Q, Liu Z, Hu YC, Zhang Z et al. SmartCrowd: Decentralized and automated incentives for distributed IoT system detection. In Proceedings - 2019 39th IEEE International Conference on Distributed Computing Systems, ICDCS 2019. Institute of Electrical and Electronics Engineers Inc. 2019. p. 1106-1116. 8884853. (Proceedings - International Conference on Distributed Computing Systems). https://doi.org/10.1109/ICDCS.2019.00113
Wu, Bo ; Xu, Ke ; Li, Qi ; Liu, Zhuotao ; Hu, Yih Chun ; Zhang, Zhichao ; Du, Xinle ; Liu, Bingyang ; Ren, Shoushou. / SmartCrowd : Decentralized and automated incentives for distributed IoT system detection. Proceedings - 2019 39th IEEE International Conference on Distributed Computing Systems, ICDCS 2019. Institute of Electrical and Electronics Engineers Inc., 2019. pp. 1106-1116 (Proceedings - International Conference on Distributed Computing Systems).
@inproceedings{e5329703afe144279c594e3406bd686a,
title = "SmartCrowd: Decentralized and automated incentives for distributed IoT system detection",
abstract = "Internet of Things (IoT) devices achieve the rapid development and have been widely deployed recently. Meanwhile, inherent vulnerabilities of IoT systems (including firmware and software) have been continually uncovered and thus the systems are always exposed to various attacks. The root cause of the issue is that IoT systems always have design flaws and implementation bugs. In particular, the released systems (e.g., by third-party marketplaces and IoT vendors) may be maliciously repackaged with malware. Unfortunately, IoT consumers are not able to effectively capture such vulnerabilities because of the limited detection capabilities. In this paper, we propose SmartCrowd, a blockchain-based platform that aims to outsource security detection of IoT systems to distributed detectors with strong detection incentives. SmartCrowd enables built-in accountability for IoT providers and authoritative references of detection results for IoT consumers. By building smart contracts, we can incentivize the efficient and high-coverage security detection of IoT systems, while providing decentralized and automated incentives for both IoT providers releasing secure IoT systems and detectors uncovering vulnerabilities. We present the security and theoretical analysis that demonstrates the security of SmartCrowd and the incentives for participators. We prototype SmartCrowd by using Ethereum and the experimental results show that SmartCrowd has both technical feasibility and financial benefits, which can be applied to build a secure IoT ecosystem.",
keywords = "Automation, Blockchain, Decentralization, Incentives, IoT System Detection",
author = "Bo Wu and Ke Xu and Qi Li and Zhuotao Liu and Hu, {Yih Chun} and Zhichao Zhang and Xinle Du and Bingyang Liu and Shoushou Ren",
year = "2019",
month = "7",
doi = "10.1109/ICDCS.2019.00113",
language = "English (US)",
series = "Proceedings - International Conference on Distributed Computing Systems",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "1106--1116",
booktitle = "Proceedings - 2019 39th IEEE International Conference on Distributed Computing Systems, ICDCS 2019",
address = "United States",

}

TY - GEN

T1 - SmartCrowd

T2 - Decentralized and automated incentives for distributed IoT system detection

AU - Wu, Bo

AU - Xu, Ke

AU - Li, Qi

AU - Liu, Zhuotao

AU - Hu, Yih Chun

AU - Zhang, Zhichao

AU - Du, Xinle

AU - Liu, Bingyang

AU - Ren, Shoushou

PY - 2019/7

Y1 - 2019/7

N2 - Internet of Things (IoT) devices achieve the rapid development and have been widely deployed recently. Meanwhile, inherent vulnerabilities of IoT systems (including firmware and software) have been continually uncovered and thus the systems are always exposed to various attacks. The root cause of the issue is that IoT systems always have design flaws and implementation bugs. In particular, the released systems (e.g., by third-party marketplaces and IoT vendors) may be maliciously repackaged with malware. Unfortunately, IoT consumers are not able to effectively capture such vulnerabilities because of the limited detection capabilities. In this paper, we propose SmartCrowd, a blockchain-based platform that aims to outsource security detection of IoT systems to distributed detectors with strong detection incentives. SmartCrowd enables built-in accountability for IoT providers and authoritative references of detection results for IoT consumers. By building smart contracts, we can incentivize the efficient and high-coverage security detection of IoT systems, while providing decentralized and automated incentives for both IoT providers releasing secure IoT systems and detectors uncovering vulnerabilities. We present the security and theoretical analysis that demonstrates the security of SmartCrowd and the incentives for participators. We prototype SmartCrowd by using Ethereum and the experimental results show that SmartCrowd has both technical feasibility and financial benefits, which can be applied to build a secure IoT ecosystem.

AB - Internet of Things (IoT) devices achieve the rapid development and have been widely deployed recently. Meanwhile, inherent vulnerabilities of IoT systems (including firmware and software) have been continually uncovered and thus the systems are always exposed to various attacks. The root cause of the issue is that IoT systems always have design flaws and implementation bugs. In particular, the released systems (e.g., by third-party marketplaces and IoT vendors) may be maliciously repackaged with malware. Unfortunately, IoT consumers are not able to effectively capture such vulnerabilities because of the limited detection capabilities. In this paper, we propose SmartCrowd, a blockchain-based platform that aims to outsource security detection of IoT systems to distributed detectors with strong detection incentives. SmartCrowd enables built-in accountability for IoT providers and authoritative references of detection results for IoT consumers. By building smart contracts, we can incentivize the efficient and high-coverage security detection of IoT systems, while providing decentralized and automated incentives for both IoT providers releasing secure IoT systems and detectors uncovering vulnerabilities. We present the security and theoretical analysis that demonstrates the security of SmartCrowd and the incentives for participators. We prototype SmartCrowd by using Ethereum and the experimental results show that SmartCrowd has both technical feasibility and financial benefits, which can be applied to build a secure IoT ecosystem.

KW - Automation

KW - Blockchain

KW - Decentralization

KW - Incentives

KW - IoT System Detection

UR - http://www.scopus.com/inward/record.url?scp=85074859786&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85074859786&partnerID=8YFLogxK

U2 - 10.1109/ICDCS.2019.00113

DO - 10.1109/ICDCS.2019.00113

M3 - Conference contribution

AN - SCOPUS:85074859786

T3 - Proceedings - International Conference on Distributed Computing Systems

SP - 1106

EP - 1116

BT - Proceedings - 2019 39th IEEE International Conference on Distributed Computing Systems, ICDCS 2019

PB - Institute of Electrical and Electronics Engineers Inc.

ER -