Affiliation:
1. Centre Universitaire d’Informatique, Geneva School of Economics and Management, University of Geneva, Route de Drize 7, CH-1227 Carouge, Switzerland
Abstract
Internet of Things (IoT) faces security concerns different from existing challenges in conventional information systems connected through the Internet because of their limited resources and heterogeneous network setups. This work proposes a novel framework for securing IoT objects, the key objective of which is to assign different Security Level Certificates (SLC) for IoT objects according to their hardware capabilities and protection measures implemented. Objects with SLCs, therefore, will be able to communicate with each other or with the Internet in a secure manner. The proposed framework is composed of five phases, namely: classification, mitigation guidelines, SLC assignment, communication plan, and legacy integration. The groundwork relies on the identification of a set of security attributes, termed security goals. By performing an analysis on common IoT attacks, we identify which of these security goals are violated for specific types of IoT. The feasibility and application of the proposed framework is illustrated at each phase using the smart home as a case study. We also provide qualitative arguments to demonstrate how the deployment of our framework solves IoT specific security challenges.
Funder
Swiss State Secretariat for Education, Research and Innovation
Subject
Electrical and Electronic Engineering,Biochemistry,Instrumentation,Atomic and Molecular Physics, and Optics,Analytical Chemistry
Reference86 articles.
1. Internet of things security: A top-down survey;Kouicem;Comput. Netw.,2018
2. A roadmap for security challenges in the Internet of Things;Natalizio;Digit. Commun. Netw.,2018
3. Deogirikar, J., and Vidhate, A. (2017, January 10–11). Security attacks in IoT: A survey. Proceedings of the International Conference on IoT in Social, Mobile, Analytics and Cloud, I-SMAC 2017, Palladam, Tamil Nadu, India.
4. An IoT multi-interface gateway for building a smart space;Chang;Open J. Soc. Sci.,2015
5. Rodriguez, J.D., Schreckling, D., and Posegga, J. (2018, January 26–30). Addressing data-centric security requirements for IOT-based systems. Proceedings of the 2016 International Workshop on Secure Internet of Things, SIoT 2016, Heraklion, Greece.