SerIoT project has developed a novel runtime verification approach for routing policy for IoT netwoks.

1. This project has received funding from
the European Union’s Horizon 2020
Research and Innovation programme
under grant agreement No. 780139
Secure and Safe Internet ofThings (SerIoT)
1 Horizon 2020, Project No. 780139
29.01.2021
Formal Verification
Information Technologies Institute, Centre of Research and Technology Hellas (CERTH/ITI)
HIT HYPERTECH INNOVATIONS LTD (HIT)

2. This project has received funding from
the European Union’s Horizon 2020
Research and Innovation programme
under grant agreement No. 780139
Formal Verification (1/2)
2 Horizon 2020, Project No. 780139
 The Problem:
 The IoT network consists of a standard topology of the core network
components, but also of a constantly changing set of edge components
(e.g. connected IoT devices) with time-varying communication links (e.g.
routing paths)
 Depending on the selected flow rule (routing path) the performance of the
network changes
 Operator should use different policies based on the demands of the
network and the use cases

3. This project has received funding from
the European Union’s Horizon 2020
Research and Innovation programme
under grant agreement No. 780139
Formal Verification (2/2)
3 Horizon 2020, Project No. 780139
 Scope: To verify the SerIoT system in a both static & dynamic manner at the
design, development and operational phase
 SerIoT Approach:
1. Runtime verification of the valid security policy through a network and
resource monitoring tool for early warnings about deviations
2. Routing policies verification for the SDN’s flow rules through multi-
objective optimization

4. This project has received funding from
the European Union’s Horizon 2020
Research and Innovation programme
under grant agreement No. 780139
Runtime Policy Verification
Overview
Horizon 2020, Project No. 780139
Scope: to verify that runtime behavior of the network is aligned to the security policy
defined by network operator ensuring confidentiality, integrity and availability awareness
1. monitor network and resource statistics
(e.g. connections per second)
2. report deviations when exceeding
predefined limits
→ A supplementary (heuristic and quick) tool
for early warnings about deviations
4

5. This project has received funding from
the European Union’s Horizon 2020
Research and Innovation programme
under grant agreement No. 780139
Runtime Policy Verification
Integration with Visual Analytics
Horizon 2020, Project No. 780139
Four links with high
connection-per-
second (CPS) are
reported by Runtime
Verification
Active events are
populated with reported
deviation detailss
5

6. This project has received funding from
the European Union’s Horizon 2020
Research and Innovation programme
under grant agreement No. 780139
Routing Policy Verification
Overview
Horizon 2020, Project No. 780139
Scope: to verify that the flow rules produced by the SDN’s routing engine are aligned to
the routing policy defined by network operator
1. collect real-time network metrics concerning energy consumption, QoS &
security information about forwarders and flows
2. compute routing policies to
o reduce energy consumption
o maximize the network QoS
o avoid low confidence forwarders
o avoid high sensitive forwarders
3. estimate of Pareto set (optimal solution)
by employing multi-objective optimization
using genetic algorithms
6

7. This project has received funding from
the European Union’s Horizon 2020
Research and Innovation programme
under grant agreement No. 780139
Routing Policy Verification
Illustrative example (1/2)
Horizon 2020, Project No. 780139
Optimal flow rule #1:
The darker blue a node is colored,
the less energy the node consumes.
Optimal flow rule #2:
The darker blue a communication
link between forwarders appears,
the less connection delays are experienced.
7

8. This project has received funding from
the European Union’s Horizon 2020
Research and Innovation programme
under grant agreement No. 780139
Routing Policy Verification
Illustrative example (2/2)
Horizon 2020, Project No. 780139
Optimal flow rule #3:
The darker blue a node appears,
the less sensitivity it has.
Optimal flow rule #4:
The darker blue a node appears,
the higher confidence it has.
8

9. This project has received funding from
the European Union’s Horizon 2020
Research and Innovation programme
under grant agreement No. 780139
9 Horizon 2020, Project No. 780139
 K. Papachristou, T. Theodorou, S. Papadopoulos, A. Protogerou, A. Drosou, D. Tzovaras,
“Runtime and Routing Security Policy Verification for Enhanced Quality of Service of
IoT Networks”, Global IoT Summit (GIoTS 2019), Aarhus, Denmark, June 2019
 K. Papachristou, T. Theodorou, S. Papadopoulos, A. Protogerou, A. Drosou, D. Tzovaras,
“Routing Policy Verification for Enhanced Energy Quality of Service and Security
Monitoring in IoT Networks", 23rd Panhellenic Conference on Informatics (PCI 2019),
Nicossia, Cyprus, 2019
 SerIoT project (2019), Deliverable ‘D2.6 - Architectural Formal Modelling, Analysis &
Synthesis R2’
 SerIoT project (2019), Deliverable ‘D2.8 - Verification of SDN-Controller and Secure
Router Design R2’
Related Publications