Towards Secure IoT Programming in Haskell
Paper i proceeding, 2020

IoT applications are often developed in programming languages with low-level abstractions, where a seemingly innocent mistake might lead to severe security vulnerabilities. Current IoT development tools make it hard to identify these vulnerabilities as they do not provide end-to-end guarantees about how data flows within and between appliances. In this work we present Haski, an embedded domain specific language(eDSL) in Haskell for secure programming of IoT devices. Haski enables developers to write Haskell programs that generate C code without falling into many of C’s pitfalls. Haski is designed after the synchronous programming language Lustre, and sports a backwards compatible information-flow control extension to restrict how sensitive data is propagated and modified within the application. We present a novel eDSL design which uses recursive monadic bindings and allows a natural use of functions and pattern matching to write embedded programs. To showcase Haski, we implement a simple smarthouse controller where communication is done via low-energy Bluetooth on the Zephyr IoT OS.

Haskell

Synchronous programming

Information-Flow Control

IoT

eDSL

Författare

Nachiappan Valliappan

Chalmers, Data- och informationsteknik, Informationssäkerhet

Robert Krook

Chalmers, Data- och informationsteknik, Funktionell programmering

Alejandro Russo

Chalmers, Data- och informationsteknik, Informationssäkerhet

Koen Claessen

Chalmers, Data- och informationsteknik, Funktionell programmering

Haskell 2020 - Proceedings of the 13th ACM SIGPLAN International Haskell Symposium, co-located with ICFP 2020

136-150

Haskell Symposium '20
Online, ,

Octopi: Säker Programering för Sakernas Internet

Stiftelsen för Strategisk forskning (SSF), 2018-03-01 -- 2023-02-28.

Ämneskategorier

Inbäddad systemteknik

Datavetenskap (datalogi)

Datorsystem

DOI

10.1145/3406088.3409027

Mer information

Senast uppdaterat

2020-12-30