❱ PATRIOTIC

PATRIOTIC (Pervasive Anti-Tampering and anti-Repackaging for IoT for Integrated C-based Firmware) is the first solution aimed at making IoT firmware self-resistant against repackaging through the whole production and delivery process.

PATRIOTIC support the protection of IoT firmware designed in C/C++ programming language. The methodology exploits the use of cryptographically obfuscated logic bombs (CLB) to hide anti-tampering (AT) checks directly in the firmware code.

The tool consists of two modules:

• CLB Injector. This module works directly on the firmware source code and is responsible for parsing the source code, detecting the QCs, and building CLBs.
• CLB Protector. This module processes the compiled IoT firmware, and it is responsible for computing the signature-verification digests of AT checks and encrypting the CLBs

❱ Publication

More details can be found in the paper "PATRIOT: Anti-Repackaging for IoT Firmware".

We submit it for consideration to Computers & Security Journal.

You can cite the paper as follows:

@misc{https://doi.org/10.48550/arxiv.2109.04337,
  doi = {10.48550/ARXIV.2109.04337},
  url = {https://arxiv.org/abs/2109.04337},
  author = {Verderame, Luca and Ruggia, Antonio and Merlo, Alessio},
  keywords = {Cryptography and Security (cs.CR), FOS: Computer and information sciences, FOS: Computer and information sciences},
  title = {PATRIOT: Anti-Repackaging for IoT Firmware},
  publisher = {arXiv},
  year = {2021},
  copyright = {arXiv.org perpetual, non-exclusive license}
}

❱ Repo Structure

• In the Tools folder, you can find the source code of the CLB Injector and the CLB Protector projects.
• In the Example folder, you can find an usage example and the instruction to reproduce it.

❱ Licencing

This tool is available under a dual license: a commercial one required for closed source projects or commercial projects, and an AGPL license for open-source projects.

Depending on your needs, you must choose one of them and follow its policies. A detail of the policies and agreements for each license type is available in the LICENSE.COMMERCIAL and LICENSE files.

❱ Credits

This software was developed for research purposes at the Computer Security Lab (CSecLab), hosted at DIBRIS, University of Genoa.

❱ Team

• Alessio Merlo - Faculty Member
• Antonio Ruggia - PhD. Student
• Luca Verderame - Postdoctoral Researcher