Security in the Internet of Things (IoT) requires ways to regularly update firmware in the field. These demands ever increase with new, agile concepts such as security as code and should be considered a regular operation. Hosting massive firmware roll-outs present a crucial challenge for the constrained wireless environment. In this paper, we explore how information-centric networking can ease reliable firmware updates. We start from the recent standards developed by the IETF SUIT working group and contribute a system that allows for a timely discovery of new firmware versions by using cryptographically protected manifest files. Our design enables a cascading firmware roll-out from a gateway towards leaf nodes in a low-power multi-hop network. While a chunking mechanism prepares firmware images for typically low-sized maximum transmission units (MTUs), an early Denial-of-Service (DoS) detection prevents the distribution of tampered or malformed chunks. In experimental evaluations on a real-world IoT testbed, we demonstrate feasible strategies with adaptive bandwidth consumption and a high resilience to connectivity loss when replicating firmware images into the IoT edge.

翻译：信息- 中心网络( IoT) 需要定期更新实地的硬软件安全。 这些要求随着新的、灵活的概念( 如安全作为代码等安全, 并应被视为常规操作)而不断增加。 主办大型公司软件推出对受限制的无线环境是一个关键的挑战。 在本文中, 我们探索了以信息为中心的网络如何方便可靠的硬软件更新。 我们从IETF SUIT工作组最近制定的标准出发, 并且帮助建立一个系统, 以便利用加密保护的显示文件及时发现新的硬软件版本。 我们的设计使得能够从低功率多机网络的叶节点的通道上推出一个加密的硬软件。 在将硬软件图像复制到 IoT 边缘时, 我们展示了适应性带宽度消耗和高连通性损失的可行策略 。