Firmware Development and Certification for IoT Devices

The Internet of Things (IoT) presents itself as an innovative technology that facilitates the interconnection of devices and physical systems via the Internet, allowing the exchange of data and the execution of automated actions. This thesis aims to examine the challenges developers face in developing firmware for IoT devices, as well as the essential criteria for their certification. The introduction outlines the fundamental significance of IoT in the contemporary technological landscape, highlighting its crucial role in establishing a digital ecosystem in which everyday objects acquire intelligence and the ability to communicate fluidly. We explore the evolution of IoT, from its embryonic phase to its practical applications in various fields, with particular attention to its impact on smart home environments. From a developer’s perspective, developing firmware for IoT devices presents unique challenges, ranging from ensuring the robustness of the code to managing its complexity to addressing security issues. We, therefore, introduce ci-generate as a tool aimed at simplifying continuous integration in software development processes, to optimize code management, strengthening its cohesion and accelerating the timely identification of errors. Furthermore, the certification of the IoT firmware produced by the developers takes on a role of primary importance, to guarantee their safety and reliability. This certification process requires a thorough analysis of the firmware binaries, starting from the identification of basic information up to the detailed examination of specific characteristics. To this end, we introduce the manifest-producer, a tool designed to extract the essential information needed for the certification process, culminating in the production of a detailed JSON manifest that provides a representation of the characteristics identified during the analysis. In conclusion, we highlight the importance of adopting solid development practices, such as continuous integration, to ensure the reliability of the IoT firmware produced. Furthermore, we highlight the crucial role of certification parameters in ensuring the integrity and compliance of IoT firmware, thus helping to strengthen the security and reliability of IoT devices within smart-home environments.