IOT on  Security and privacy
3747934
Blockchain for IoT security and privacy: The case study of a smart home
Internet of Things (IoT) security and privacy remain a major challenge, mainly due to the massive scale and distributed nature of IoT networks. Blockchain based approaches provide decentralized security and privacy, yet they involve significant energy, delay, and computational overhead that is not suitable for most resource constrained IoT devices. In our previous work, we presented a lightweight instantiation of a BC particularly geared for use in IoT by eliminating the Proof of Work (POW) and the concept of coins. Our approach was exemplified in a smart home setting and consists of three main tiers namely: cloud storage, overlay, and smart home. In this paper we delve deeper and outline the various core components and functions of the smart home tier. Each smart home is equipped with an always online, high resource device, known as "miner" that is responsible for handling all communication within and external to the home. The miner also preserves a private and secure BC, used for controlling and auditing communications. We show that our proposed BC based smart home framework is secure by thoroughly analysing its security with respect to the fundamental security goals of confidentiality, integrity, and availability. Finally, we present simulation results to highlight that the overheads (in terms of traffic, processing time and energy consumption) introduced by our approach are insignificant relative to its security and privacy gains.
2017 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops)
Ali Dorri Salil S Kanhere Raja Jurdak Praveen Gauravaram
209383028
Trustworthiness in IoT A Standards Gap Analysis on Security, Data Protection and Privacy
With the emergence of new digital trends like Internet of Things (IoT) more industry actors and technical committees pursue research in utilising such technologies as they promise a better and optimised management, improved energy efficiency and a better quality living through a wide array of value added services. However, as sensing, actuation, communication and control become increasingly more sophisticated, such promising data driven systems generate, process, and exchange larger amounts of security critical and privacy sensitive data, which makes them attractive targets of attacks. In turn this affirms the importance of trustworthiness in IoT and emphasises the need of a solid technical and regulatory foundation. The goal of this paper is to first introduce the concept of trustworthiness in IoT, its main pillars namely, security, privacy and data protection, and then analyse the state of the art in research and standardisation for each of these subareas. Throughout the paper, we develop and refer to Unmanned Aerial Vehicles (UAVs) as a promising value added service example of mobile IoT devices. The paper then presents a thorough gap analysis and concludes with recommendations for future work.
2019 IEEE Conference on Standards for Communications and Networking (CSCN)
Nader S Labib Matthias R Brust Gregoire Danoy Pascal Bouvry
225960896
Research on the Security and Privacy Issues of IOT in E commerce
In the context of rapid development of e commerce, the Internet of Thing, an emerging technology shorted for IOT, has gradually matured and played a great role in the field of e commerce. However, many security issues of data on the cloud platform used for storage and calculation has occurred with the increase of data of IOT in E commerce. Based on the guarantee of logic security in E commerce business and the protection of users' privacy data, this paper proposes a comprehensive and high efficient distributed solution oriented to actual data. First, redundant parity vectors are constructed by distributing error correction codes through files to ensure the credibility of the data. Second, through distributed verification mode of homomorphic token and error collecting code, the storage accuracy of business logic data is guaranteed and the location of the error data is given. Finally, with the detailed analysis of security and efficiency, the scheme is proposed efficiently so as to defend various malicious data tampering and stealing attack. In the results of experimental verification of data tampering attacks and data storage errors, the scheme proposed in this paper has a high probability of detecting a very small amount of data tampering, and at the same time, it can locate the servers storing the wrong data, therefore, it has high application value.
Mingli Hou
155107127
Enhancing IoT Security and Privacy Using Distributed Ledgers with IOTA and the Tangle
The Internet of Things (IoT) devices currently rely on centralized, brokered communication models which call for a number of security flaws and threats. Privacy security remain a challenge owing to the existing systems being centralized creating a single point of failure. In this paper, we lay out an architecture for incorporating a concept similar to Blockchain the technology that underpins the cryptocurrency Bitcoin and many other cryptocurrencies to provide decentralized security and privacy for IoT devices. Currently, the issue with most IoT devices is that they lack the processing power, storage and computational overhead to run consensus algorithms to be an active part of the Blockchain network. The current issue with the blockchain on the other hand, is its low scalability and low number of transactions per second. We present an innovative approach using a technology called IOTA. This addresses some of the most important problems with existing blockchain infrastructure such as being able to run on lightweight devices with constrained memory. We eliminate transaction fees and the concept of mining which requires a large amount of processing power to compete with other miners. IOTA's main component is the Tangle, a guided acyclic graph (DAG) for transaction storage. We discuss creation of two IoT applications on the tangle a smart utility meter system and a smart car transaction system which are connected to internet through Low Power Wide Area IoT networks.
2019 6th International Conference on Signal Processing and Integrated Networks (SPIN)
Bilal Shabandri Piyush Maheshwari
169675923
Chapter Eight A blockchain based access control framework for the security and privacy of IoT with strong anonymity unlinkability and intractability guarantees
Abstract Motivated by the recent explosion of interest around the blockchain, we examine whether they make a good fit to build a lightweight and robust access control framework to address security and privacy issues in the Internet of Things (IoT) sector. In this direction, this chapter discusses the limitations of the centralized model to secure IoT and proposes the blockchain approach as example of successful distributed system to bring security and privacy to IoT devices. In this direction, we introduce FairAccess and PPDAC, as a lightweight and privacy preserving access control framework based on the emergent blockchain technology, mainly the permissionless and public type, to ensure fine grained access control functions for IoT devices with strong anonymity guarantee for IoT end users. The proposed framework retains the benefits of the blockchain to meet IoT security and privacy arising needs while overcoming the challenges in integrating the blockchain to IoT.
Adv. Comput.
Aafaf Ouaddah
195697948
Security and Privacy in IoT Systems: A Case Study of Healthcare Products
Internet of Things (IoT) is facilitated by heterogeneous technologies, which contribute to the providing of innovative services in a large number of application domains. The satisfaction of security and privacy requirements in this scenario are becoming a main challenge for IoT systems and their developers. Nevertheless, most works on IoT security and privacy requirements look at these requirements from a high level view. Hence, important aspects of security and privacy functionalities will be disregarded, causing wrong design decisions. To combat this problem, in our previous work, we summarized the most current documents related to security and privacy functionalities in the setting of IoT and provided a new taxonomy framework that organizes all aspects of security and privacy baselines, guidelines and recommendations. To give an understanding of how the framework can help to improve security and privacy of IoT products, and help to facilitate developing and designing secure and privacy aware IoT systems, in this paper we delve deeper and demonstrate the usefulness of the framework by a case study of healthcare products, in combination with a recent security classification method.
2019 13th International Symposium on Medical Information and Communication Technology (ISMICT)
Elahe Fazeldehkordi Olaf Owe Josef Noll
209900890
Security and Privacy Functionalities in IoT
Internet of Things (IoT) offers a variety of technologies for connecting different kinds of heterogeneous devices. Security and privacy are becoming the main issue for IoT systems and their developers. Nevertheless, most works on IoT security and privacy requirements look at these requirements from a high level view. Hence, the essential aspects of security and privacy functionalities will be disregarded, causing wrong design decisions. To combat this problem, this paper summarizes the most current documents related to security and privacy functionalities in the setting of IoT and provides a new taxonomy framework that organizes all aspects of security and privacy baselines, guidelines, and recommendations. To give an understanding of how the framework can help to improve security and privacy of IoT products, we combine it with a security classification method and demonstrate the usefulness by a case study of health products. Our framework can serve as a cornerstone towards the development of appropriate security solutions.
2019 17th International Conference on Privacy, Security and Trust (PST)
Elahe Fazeldehkordi Olaf Owe Josef Noll
26283664
Security and privacy issues for an IoT based smart home
Internet of Things (IoT) can support numerous applications and services in various domains, such as smart cities and smart homes. IoT smart objects interact with other components e.g. proxies, mobile devices, and data collectors, for management, data sharing and other activities in the context of the provided service. Though such components contribute to address various societal challenges and provide new advanced services for users, their limited processing capabilities make them vulnerable to well known security and privacy threats. Until now various research works have studied security and privacy in IoT, validating this claim. However, to the best of our knowledge literature lacks research focusing on security and privacy flaws introduced in IoT through interactions among different devices supporting a smart home architecture. In particular, we set up the scene for a security and privacy threat analysis for a typical smart home architecture using off the shelf components. To do so, we employ a smart home IoT architecture that enables users to interact with it through various devices that support smart house management, and we analyze different scenarios to identify possible security and privacy issues for users.
2017 40th International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO)
Dimitris Geneiatakis Ioannis Kounelis Ricardo Neisse Igor Nai Fovino Gary Steri Gianmarco Baldini
13707038
A taxonomy of IoT: Security and privacy threats
Potential Security and Privacy concerns are widely discussed in the community of Internet of Things (IoT) however, the issue is still not fully addressed, and the demands for new methods of investigation are highly appraised. The current published research focused more on identifying the security issues associated with early type of IoT's applications based on sensors, such as RFID and WSN. However, todays IoT commercial applications are more advanced and use different of integrated objects. This research paper utilizes Design Science Research (DSR) methodology to better understand the security and privacy issue in IoT through creating an artifact. The purpose of this study is to propose taxonomy in order to categorize IoT's objects, so security and privacy issues would be fully addressed.
2018 International Conference on Information and Computer Technologies (ICICT)
Badr Alsamani Husam Lahza
53045279
Review of Different Encryptionand Decryption Techniques Used for Security and Privacy of IoT in Different Applications
Internet of Things (IoT) allows different devices connected to global network or Internet for desired application. This emerging trend of Internet of Things have been developing with exponential rate since last two decades and where different technologies and protocol stacks have been introduced in market. While developing different techniques of integration of smart devices we are facing security and privacy issues of data. To cope up with these issues different techniques have been introduced to overcome this problem. In this research paper we provide the survey of different techniques and technologies used to provide reliable and secure data communications. This research paper will focus on encryption and decryption techniques used in IoT.
2018 IEEE International Conference on Smart Energy Grid Engineering (SEGE)
Rashid Hussain Irfan Abdullah