A Secure Integrated Framework for Fog-Assisted Internet-of-Things Systems

Abstract

Fog-Assisted Internet of Things (Fog-IoT) systems are deployed in remote and unprotected environments, making them vulnerable to security, privacy, and trust challenges. Existing studies propose security schemes and trust models for these systems. However, mitigation of insider attacks, namely blackhole, sinkhole, sybil, collusion, self-promotion, and privilege escalation, has always been a challenge and mostly carried out by the legitimate nodes. Compared to other studies, this paper proposes a framework featuring attribute-based access control and trust-based behavioural monitoring to address the challenges mentioned above. The proposed framework consists of two components, the security component (SC) and the trust management component (TMC). SC ensures data confidentiality, integrity, authentication, and authorization. TMC evaluates Fog-IoT entities' performance using a trust model based on a set of QoS and network communication features. Subsequently, trust is embedded as an attribute within SC's access control policies, ensuring that only trusted entities are granted access to fog resources. Several attacking scenarios, namely DoS, DDoS, probing, and data theft are designed to elaborate on how the change in trust triggers the change in access rights and, therefore, validates the proposed integrated framework's design principles. The framework is evaluated on a Raspberry Pi 3 Model B to benchmark its performance in terms of time and memory complexity. Our results show that both SC and TMC are lightweight and suitable for resource-constrained devices.

A Comprehensive Systematic Review of Access Control in IoT: Requirements, Technologies, and Evaluation Metrics

“…Ensuring such availability means designing the system to be robust and adaptable, safeguarding continuous and reliable access when needed. From an availability perspective, the presented secure integrated framework in [14] for Fog-IoT systems is designed to enhance the resilience and uninterrupted functioning of Fog-IoT deployments. Fog-IoT systems, being set up in remote areas, are susceptible to a range of attacks, including insider threats and various external attacks like Denial of Service (DoS) and Distributed DoS.…”

Securing IoT networks: A fog-based framework for malicious device detection

“…A secure integrated framework for fog-assisted IoT systems was introduced by Junejo et al By integrating fog computing capabilities with conventional security mechanisms, their framework [14] effectively tackles the security challenges in IoT systems. Expanding on the research conducted by Zahra and Chishti, this framework offers a comprehensive perspective on IoT security that incorporates conventional and fog-based security protocols.…”

Cloud Security with Lightweight ABE on Mobile IoT Devices

“…𝑪𝑺𝑷. 𝑬𝒏𝒄 (𝑝𝑎𝑟𝑎𝑚𝑠, 𝑝𝑘 0 , 𝑃𝐶𝑇 𝒯 ) : Given 𝑝𝑘 𝑜 = (𝑝𝑘 𝑜 (1) , 𝑝𝑘 𝑜 (2) , 𝑝𝑘 𝑜 (3) , {𝑝𝑘 𝑖.𝑜 } 𝑖𝜖𝑈 ) and 𝑃𝐶𝑇 𝒯 = (𝐶, 𝑟 ′ , 𝒯, {𝑞 𝑣 𝑖 } 𝑣 𝑖𝜖𝐿 𝒯 ), this technique calculates ′ , 𝐶 ′′ , 𝐶 𝑖 , 𝐶 𝑖 ′ in Eqs. ( 17), ( 18), (19), and ( 20)…”

“…Industrial internet of things (IoT) is a new paradigm altering contemporary industries by associating numerous devices with gateways of IoT, base stations, and points of access, enabling ubiquitous data collection and exchange over the sectors of various industries. Local edge computing nodes gather a lot of data from different IoT devices, process it, and send it to distant cloud servers where it can be used by data consumers like assembly line workers, technicians, and business managers [1]. Cloud-based IoT solutions make using the same data across many services feasible, making it easier to store and process the collected data and allowing user mobility.…”