Pub Date : 2016-12-14DOI: 10.1109/WF-IoT.2016.7845397
Andrew John Poulter, Steven J. Johnston, S. Cox
Internet of Things, and other connected devices require secure mechanisms to facilitate the propagation of Command & Control messages to enable the remote management of the devices — including the ability to remotely perform software update on the devices. This paper introduces a new protocol designed to sit on top of the commonly-used MQTT protocol to provide a secure and confirmable mechanism to deliver such messages to remote Internet of Things devices.
{"title":"SRUP: The secure remote update protocol","authors":"Andrew John Poulter, Steven J. Johnston, S. Cox","doi":"10.1109/WF-IoT.2016.7845397","DOIUrl":"https://doi.org/10.1109/WF-IoT.2016.7845397","url":null,"abstract":"Internet of Things, and other connected devices require secure mechanisms to facilitate the propagation of Command & Control messages to enable the remote management of the devices — including the ability to remotely perform software update on the devices. This paper introduces a new protocol designed to sit on top of the commonly-used MQTT protocol to provide a secure and confirmable mechanism to deliver such messages to remote Internet of Things devices.","PeriodicalId":373932,"journal":{"name":"2016 IEEE 3rd World Forum on Internet of Things (WF-IoT)","volume":"219 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115835173","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-12-12DOI: 10.1109/WF-IoT.2016.7845498
Fengrui Shi, U. Adeel, E. Theodoridis, M. Haghighi, J. Mccann
Urban IoT data collection is challenging due to the limitations of the fixed sensing infrastructures. Instead of transmitting data directly through expensive cellular networks, citizen-centric data collection scheme through opportunistic network takes advantage of human mobility as well as cheap WiFi and D2D communication. In this paper, we present OppNet, which implements a context aware data forwarding algorithm and fills the gap between theoretical modelling of opportunistic networking and real deployment of citizen-centric data collection system. According to the results from a 3-day real-life experiment, OppNet shows consistent performance in terms of number of hops and time delay. Moreover, the underlying social structure can be clearly identified by analysing social contact data collected through OppNet.
{"title":"OppNet: Enabling citizen-centric urban IoT data collection through opportunistic connectivity service","authors":"Fengrui Shi, U. Adeel, E. Theodoridis, M. Haghighi, J. Mccann","doi":"10.1109/WF-IoT.2016.7845498","DOIUrl":"https://doi.org/10.1109/WF-IoT.2016.7845498","url":null,"abstract":"Urban IoT data collection is challenging due to the limitations of the fixed sensing infrastructures. Instead of transmitting data directly through expensive cellular networks, citizen-centric data collection scheme through opportunistic network takes advantage of human mobility as well as cheap WiFi and D2D communication. In this paper, we present OppNet, which implements a context aware data forwarding algorithm and fills the gap between theoretical modelling of opportunistic networking and real deployment of citizen-centric data collection system. According to the results from a 3-day real-life experiment, OppNet shows consistent performance in terms of number of hops and time delay. Moreover, the underlying social structure can be clearly identified by analysing social contact data collected through OppNet.","PeriodicalId":373932,"journal":{"name":"2016 IEEE 3rd World Forum on Internet of Things (WF-IoT)","volume":"103 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132494189","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-12-12DOI: 10.1109/WF-IoT.2016.7845424
Renzo E. Navas, Manuel Lagos, L. Toutain, Kumaran Vijayasankar
The Internet of Things will scale to billions of devices in the next coming years. A secure communication framework is needed to interconnect all these objects, by taking into account their intrinsic constrained in terms of energy, cpu and memory; Several proposals relying on adapting existing well-known and standardized security solutions exist, but we believe there is still a gap for most-constrained nodes to provide fine-grained authorization and secure establishment of fresh cryptographic keys. We propose a mechanism that runs on top of the OAuth Authorization architecture and provides the bootstrapping of fresh authenticated symmetric cryptographic material between previously unknown parties using a nonce-based protocol. We set up an energy measurement platform to evaluate our proposal and compare it with existing work.
{"title":"Nonce-based authenticated key establishment over OAuth 2.0 IoT proof-of-possession architecture","authors":"Renzo E. Navas, Manuel Lagos, L. Toutain, Kumaran Vijayasankar","doi":"10.1109/WF-IoT.2016.7845424","DOIUrl":"https://doi.org/10.1109/WF-IoT.2016.7845424","url":null,"abstract":"The Internet of Things will scale to billions of devices in the next coming years. A secure communication framework is needed to interconnect all these objects, by taking into account their intrinsic constrained in terms of energy, cpu and memory; Several proposals relying on adapting existing well-known and standardized security solutions exist, but we believe there is still a gap for most-constrained nodes to provide fine-grained authorization and secure establishment of fresh cryptographic keys. We propose a mechanism that runs on top of the OAuth Authorization architecture and provides the bootstrapping of fresh authenticated symmetric cryptographic material between previously unknown parties using a nonce-based protocol. We set up an energy measurement platform to evaluate our proposal and compare it with existing work.","PeriodicalId":373932,"journal":{"name":"2016 IEEE 3rd World Forum on Internet of Things (WF-IoT)","volume":"44 4","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"120844463","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-12-12DOI: 10.1109/WF-IOT.2016.7845475
Georgios Z. Papadopoulos, A. Mavromatis, Xenofon Fafoutis, N. Montavont, R. Piechocki, T. Tryfonas, G. Oikonomou
In the IEEE 802.15.4-2015 standard, Time Slotted Channel Hopping (TSCH) aims to guarantee high-level network reliability by keeping nodes time-synchronised. In order to ensure successful communication between a sender and a receiver, the latter starts listening shortly before the expected time of a MAC layer frame's arrival. The offset between the time a node starts listening and the estimated time of frame arrival is called guard time and it aims to reduce the probability of missed frames due to clock drift. In this paper, we investigate the impact of the guard time on network performance. We identify that, when using the 6tisch minimal schedule, the most significant cause of energy consumption is idle listening during guard time. Therefore, we first perform mathematical modelling on a TSCH link to identify the guard time that maximises the energy-efficiency of the TSCH network in single hop topology. We then continue in multi-hop network, where we empirically adapt the guard time locally at each node depending its distance, in terms of hops, from the sink. Our performance evaluation results, conducted using the Contiki OS, demonstrate that the proposed decentralised guard time adaptation can reduce the energy consumption by up to 40%, without compromising network reliability.
{"title":"Guard time optimisation and adaptation for energy efficient multi-hop TSCH networks","authors":"Georgios Z. Papadopoulos, A. Mavromatis, Xenofon Fafoutis, N. Montavont, R. Piechocki, T. Tryfonas, G. Oikonomou","doi":"10.1109/WF-IOT.2016.7845475","DOIUrl":"https://doi.org/10.1109/WF-IOT.2016.7845475","url":null,"abstract":"In the IEEE 802.15.4-2015 standard, Time Slotted Channel Hopping (TSCH) aims to guarantee high-level network reliability by keeping nodes time-synchronised. In order to ensure successful communication between a sender and a receiver, the latter starts listening shortly before the expected time of a MAC layer frame's arrival. The offset between the time a node starts listening and the estimated time of frame arrival is called guard time and it aims to reduce the probability of missed frames due to clock drift. In this paper, we investigate the impact of the guard time on network performance. We identify that, when using the 6tisch minimal schedule, the most significant cause of energy consumption is idle listening during guard time. Therefore, we first perform mathematical modelling on a TSCH link to identify the guard time that maximises the energy-efficiency of the TSCH network in single hop topology. We then continue in multi-hop network, where we empirically adapt the guard time locally at each node depending its distance, in terms of hops, from the sink. Our performance evaluation results, conducted using the Contiki OS, demonstrate that the proposed decentralised guard time adaptation can reduce the energy consumption by up to 40%, without compromising network reliability.","PeriodicalId":373932,"journal":{"name":"2016 IEEE 3rd World Forum on Internet of Things (WF-IoT)","volume":"25 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132552131","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-12-12DOI: 10.1109/WF-IoT.2016.7845517
M. Haghighi, Zhijin Qin, Davide Carboni, U. Adeel, Fengrui Shi, J. Mccann
Low Power Wide Area (LPWA) networks have been the enabling technology for large-scale sensor and actuator networks. Low cost, energy-efficiency and longevity of such networks make them perfect candidates for smart city applications. LoRa is a new LPWA standard based on spread spectrum technology, which is suitable for sensor nodes enabling long battery life and bi-directional communication but with low data rates. In this paper, we will demonstrate a use-case inspired model in which, end-nodes with multiple radio transceivers (LoRa/WiFi/BLE) have the option to interconnect via multiple networks to improve communications resilience under the diverse conditions of a smart city of a billion devices. To facilitate this, each node has the ability to switch radio communications opportunistically and adaptively, and this is based on the application requirements and dynamic radio parameters.
{"title":"Game theoretic and auction-based algorithms towards opportunistic communications in LPWA LoRa networks","authors":"M. Haghighi, Zhijin Qin, Davide Carboni, U. Adeel, Fengrui Shi, J. Mccann","doi":"10.1109/WF-IoT.2016.7845517","DOIUrl":"https://doi.org/10.1109/WF-IoT.2016.7845517","url":null,"abstract":"Low Power Wide Area (LPWA) networks have been the enabling technology for large-scale sensor and actuator networks. Low cost, energy-efficiency and longevity of such networks make them perfect candidates for smart city applications. LoRa is a new LPWA standard based on spread spectrum technology, which is suitable for sensor nodes enabling long battery life and bi-directional communication but with low data rates. In this paper, we will demonstrate a use-case inspired model in which, end-nodes with multiple radio transceivers (LoRa/WiFi/BLE) have the option to interconnect via multiple networks to improve communications resilience under the diverse conditions of a smart city of a billion devices. To facilitate this, each node has the ability to switch radio communications opportunistically and adaptively, and this is based on the application requirements and dynamic radio parameters.","PeriodicalId":373932,"journal":{"name":"2016 IEEE 3rd World Forum on Internet of Things (WF-IoT)","volume":"2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123860291","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-12-12DOI: 10.1109/WF-IOT.2016.7845470
R. Agarwal, David Gómez Fernandez, Tarek Elsaleh, A. Gyrard, J. Lanza, Luis Sánchez, N. Georgantas, V. Issarny
After a thorough analysis of existing Internet of Things (IoT) related ontologies, in this paper we propose a solution that aims to achieve semantic interoperability among heterogeneous testbeds. Our model is framed within the EU H2020's FIESTA-IoT project, that aims to seamlessly support the federation of testbeds through the usage of semantic-based technologies. Our proposed model (ontology) takes inspiration from the well-known Noy et al. methodology for reusing and interconnecting existing ontologies. To build the ontology, we leverage a number of core concepts from various mainstream ontologies and taxonomies, such as Semantic Sensor Network (SSN), M3-lite (a lite version of M3 and also an outcome of this study), WGS84, IoT-lite, Time, and DUL. In addition, we also introduce a set of tools that aims to help external testbeds adapt their respective datasets to the developed ontology.
{"title":"Unified IoT ontology to enable interoperability and federation of testbeds","authors":"R. Agarwal, David Gómez Fernandez, Tarek Elsaleh, A. Gyrard, J. Lanza, Luis Sánchez, N. Georgantas, V. Issarny","doi":"10.1109/WF-IOT.2016.7845470","DOIUrl":"https://doi.org/10.1109/WF-IOT.2016.7845470","url":null,"abstract":"After a thorough analysis of existing Internet of Things (IoT) related ontologies, in this paper we propose a solution that aims to achieve semantic interoperability among heterogeneous testbeds. Our model is framed within the EU H2020's FIESTA-IoT project, that aims to seamlessly support the federation of testbeds through the usage of semantic-based technologies. Our proposed model (ontology) takes inspiration from the well-known Noy et al. methodology for reusing and interconnecting existing ontologies. To build the ontology, we leverage a number of core concepts from various mainstream ontologies and taxonomies, such as Semantic Sensor Network (SSN), M3-lite (a lite version of M3 and also an outcome of this study), WGS84, IoT-lite, Time, and DUL. In addition, we also introduce a set of tools that aims to help external testbeds adapt their respective datasets to the developed ontology.","PeriodicalId":373932,"journal":{"name":"2016 IEEE 3rd World Forum on Internet of Things (WF-IoT)","volume":"18 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131816731","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-12-01DOI: 10.1109/WF-IoT.2016.7845437
U. Kulau, Johannes van Balen, S. Schildt, Felix Büsching, L. Wolf
In long-term sensing applications data patterns can vary significantly over time. Often a multitude of sensors are used to measure different types of environmental conditions. Considering such variations it is hard to select a predefined sample rate that guarantees both, high data quality and energy efficiency. Hence, this paper presents a dynamic sample rate adaptation that strikes a balance offering optimal energy efficiency while maintaining high data quality. Based on the general concept of Bollinger Bands, a metric is derived that solely depends on the trend of the measured data itself. A real world measurement in the area of smart farming is used to show the effectiveness of this approach.
{"title":"Dynamic sample rate adaptation for long-term IoT sensing applications","authors":"U. Kulau, Johannes van Balen, S. Schildt, Felix Büsching, L. Wolf","doi":"10.1109/WF-IoT.2016.7845437","DOIUrl":"https://doi.org/10.1109/WF-IoT.2016.7845437","url":null,"abstract":"In long-term sensing applications data patterns can vary significantly over time. Often a multitude of sensors are used to measure different types of environmental conditions. Considering such variations it is hard to select a predefined sample rate that guarantees both, high data quality and energy efficiency. Hence, this paper presents a dynamic sample rate adaptation that strikes a balance offering optimal energy efficiency while maintaining high data quality. Based on the general concept of Bollinger Bands, a metric is derived that solely depends on the trend of the measured data itself. A real world measurement in the area of smart farming is used to show the effectiveness of this approach.","PeriodicalId":373932,"journal":{"name":"2016 IEEE 3rd World Forum on Internet of Things (WF-IoT)","volume":"24 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127168039","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-12-01DOI: 10.1109/WF-IOT.2016.7845502
F. Cicirelli, A. Guerrieri, G. Spezzano, Andrea Vinci, O. Briante, G. Ruggeri
The advent of Internet of Things (IoT) has fueled the implementation of Smart Environments (SEs) where the information made available by the “Things” is processed and utilized to increase the livability, the safety and the security of the environment, and to make easier the life of its inhabitants. In literature there are many attempts to create specific SEs or platform for the SEs realization. Although effective, these solutions lack of interoperability with other third-part “Things”. In this paper we propose iSapiens, a Java-based platform for the design and the implementation of SEs. iSapiens deals with the above mentioned limitation by leveraging the Social Internet of Things (SIoT) paradigm to dynamically include in a SE newly available “Things” without requiring any human intervention. iSapiens allows the creation of pervasive smart environments by exploiting the edge computing paradigm, that makes locally available distributed storage and computational resources without introducing latency and causing bandwidth shortage.
物联网(IoT)的出现推动了智能环境(se)的实施，在智能环境中，“物”提供的信息被处理和利用，以提高环境的宜居性、安全性和安全性，并使居民的生活更轻松。在文献中，有许多尝试创建特定的社会经济体系或实现社会经济体系的平台。这些解决方案虽然有效，但缺乏与其他第三方“事物”的互操作性。在本文中，我们提出了iSapiens，一个基于java的平台，用于设计和实现se。iSapiens通过利用社会物联网(Social Internet of Things, SIoT)范式来处理上述限制，在不需要任何人工干预的情况下动态地将新可用的“事物”包含在SE中。iSapiens允许通过利用边缘计算范式创建无处不在的智能环境，这使得本地可用的分布式存储和计算资源不会引入延迟和导致带宽短缺。
{"title":"iSapiens: A platform for social and pervasive smart environments","authors":"F. Cicirelli, A. Guerrieri, G. Spezzano, Andrea Vinci, O. Briante, G. Ruggeri","doi":"10.1109/WF-IOT.2016.7845502","DOIUrl":"https://doi.org/10.1109/WF-IOT.2016.7845502","url":null,"abstract":"The advent of Internet of Things (IoT) has fueled the implementation of Smart Environments (SEs) where the information made available by the “Things” is processed and utilized to increase the livability, the safety and the security of the environment, and to make easier the life of its inhabitants. In literature there are many attempts to create specific SEs or platform for the SEs realization. Although effective, these solutions lack of interoperability with other third-part “Things”. In this paper we propose iSapiens, a Java-based platform for the design and the implementation of SEs. iSapiens deals with the above mentioned limitation by leveraging the Social Internet of Things (SIoT) paradigm to dynamically include in a SE newly available “Things” without requiring any human intervention. iSapiens allows the creation of pervasive smart environments by exploiting the edge computing paradigm, that makes locally available distributed storage and computational resources without introducing latency and causing bandwidth shortage.","PeriodicalId":373932,"journal":{"name":"2016 IEEE 3rd World Forum on Internet of Things (WF-IoT)","volume":"904 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123268944","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-12-01DOI: 10.1109/WF-IOT.2016.7845413
O. Rolik, S. Telenyk, E. Zharikov, Maxim Yasochka
The Internet of Things (IoT) is an emerging technology that is designed to improve the quality of consumer's life and also to improve economic indicators and productivity of enterprises, for more efficient use of their resources. In this paper the authors propose an approach to Microcloud-based IoT infrastructure management which provides the required quality of IT services with rational use of IT resources. The proposed approach is based on decomposition-compensation method in which the task of operational service quality management is to maintain a given level of service quality with the use of minimum IT resources amount in IoT environment. Thus the maximum efficiency can be achieved by selecting such control when actual level of service corresponds to the agreed one with the business unit and can be achieved by minimal costs. The proposed approach allows the efficient use of resources for IT services provision in IoT ecosystem through the implementation of service level coordination, resource planning and service level management processes in an integrated IT infrastructure management system. The main goal of this paper is to propose Microcloud-based IoT infrastructure resource management approach using decomposition-compensation method.
{"title":"Decomposition-compensation approach to microcloud-based IoT infrastructure management","authors":"O. Rolik, S. Telenyk, E. Zharikov, Maxim Yasochka","doi":"10.1109/WF-IOT.2016.7845413","DOIUrl":"https://doi.org/10.1109/WF-IOT.2016.7845413","url":null,"abstract":"The Internet of Things (IoT) is an emerging technology that is designed to improve the quality of consumer's life and also to improve economic indicators and productivity of enterprises, for more efficient use of their resources. In this paper the authors propose an approach to Microcloud-based IoT infrastructure management which provides the required quality of IT services with rational use of IT resources. The proposed approach is based on decomposition-compensation method in which the task of operational service quality management is to maintain a given level of service quality with the use of minimum IT resources amount in IoT environment. Thus the maximum efficiency can be achieved by selecting such control when actual level of service corresponds to the agreed one with the business unit and can be achieved by minimal costs. The proposed approach allows the efficient use of resources for IT services provision in IoT ecosystem through the implementation of service level coordination, resource planning and service level management processes in an integrated IT infrastructure management system. The main goal of this paper is to propose Microcloud-based IoT infrastructure resource management approach using decomposition-compensation method.","PeriodicalId":373932,"journal":{"name":"2016 IEEE 3rd World Forum on Internet of Things (WF-IoT)","volume":"771 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123282232","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-12-01DOI: 10.1109/WF-IoT.2016.7845429
Mauricio Tellez, Samy El-Tawab, M. Heydari
With the rapid technological advancements of sensors, Wireless Sensor Networks (WSNs) have become a popular technology for the Internet of Things (IoT). We investigated the security of WSNs in an environmental monitoring application with the goal to demonstrate the overall security. We implemented a Secure Temperature Monitoring System (STMS), which served as our WSN application. Our results revealed a security flaw found in the bootstrap loader (BSL) password used to protect MSP430 micro-controller units (MCUs). We demonstrated how the BSL password could be brute forced in a matter of days. Furthermore, we illustrate how an attacker can reverse engineer WSN applications to obtain critical security information such as encryption keys. We contribute a solution to patch the weak BSL password security flaw and improve the security of MSP430 MCU chips. The Secure-BSL patch we contribute allows the randomization of the BSL password. Our solution increases the brute force time to decades. The impractical brute force time enhances the security of the MSP430 and prevents future reverse engineering tactics. Our research serves as proof that the security of WSNs and the overall IoT technology is broken if we cannot protect these everyday objects at the physical layer.
{"title":"IoT security attacks using reverse engineering methods on WSN applications","authors":"Mauricio Tellez, Samy El-Tawab, M. Heydari","doi":"10.1109/WF-IoT.2016.7845429","DOIUrl":"https://doi.org/10.1109/WF-IoT.2016.7845429","url":null,"abstract":"With the rapid technological advancements of sensors, Wireless Sensor Networks (WSNs) have become a popular technology for the Internet of Things (IoT). We investigated the security of WSNs in an environmental monitoring application with the goal to demonstrate the overall security. We implemented a Secure Temperature Monitoring System (STMS), which served as our WSN application. Our results revealed a security flaw found in the bootstrap loader (BSL) password used to protect MSP430 micro-controller units (MCUs). We demonstrated how the BSL password could be brute forced in a matter of days. Furthermore, we illustrate how an attacker can reverse engineer WSN applications to obtain critical security information such as encryption keys. We contribute a solution to patch the weak BSL password security flaw and improve the security of MSP430 MCU chips. The Secure-BSL patch we contribute allows the randomization of the BSL password. Our solution increases the brute force time to decades. The impractical brute force time enhances the security of the MSP430 and prevents future reverse engineering tactics. Our research serves as proof that the security of WSNs and the overall IoT technology is broken if we cannot protect these everyday objects at the physical layer.","PeriodicalId":373932,"journal":{"name":"2016 IEEE 3rd World Forum on Internet of Things (WF-IoT)","volume":"168 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115202969","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
京公网安备 11010802042870号
京ICP备2023020795号-1
扫码关注我们
求助内容：
应助结果提醒方式：