If you cite this paper, please use the ICN reference: C. Gündoğan, C. Amsüss, T. C. Schmidt, M. Wählisch. Reliable Firmware Updates for the Information-Centric Internet of Things. In Proc. of ACM ICN, ACM, 2021. Reliable Firmware Updates for the Information-Centric Internet of Things Cenk Gündoğan Christian Amsüss HAW Hamburg
[email protected] [email protected] Thomas C. Schmidt Matthias Wählisch HAW Hamburg Freie Universität Berlin
[email protected] [email protected] ABSTRACT Security in the Internet of Things (IoT) requires ways to regularly update firmware in the field. These demands ever increase withnew, agile concepts such as security as code and should be considered a regular operation. Hosting massive firmware roll-outs present a crucial challenge for the constrained wireless environment. In this paper, we explore how information-centric networking can ease reliable firmware updates. We start from the recent standards devel- oped by the IETF SUIT working group and contribute a system that allows for a timely discovery of new firmware versions by using cryptographically protected manifest files. Our design enables a cascading firmware roll-out from a gateway towards leaf nodes in a low-power multi-hop network. While a chunking mechanism prepares firmware images for typically low-sized maximum trans- mission units (MTUs), an early Denial-of-Service (DoS) detection Figure 1: Massive firmware roll-out campaign in distributed prevents the distribution of tampered or malformed chunks. In and heterogeneous networks experimental evaluations on a real-world IoT testbed, we demon- strate feasible strategies with adaptive bandwidth consumption and a high resilience to connectivity loss when replicating firmware Regular software updates are part of the common life cycle for images into the IoT edge.