A survey of secure middleware for the Internet of Things

Fremantle, Paul; Scott, Philip

doi:10.7717/peerj-cs.114

Cited by 58 publications

(13 citation statements)

References 95 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The prototype of the IG is called IGNITE (Intelligent Gateway for Network IoT Environments). 2 IGNITE runs in a Docker cloud container environment and has access to control this Docker environment. When a device or TPA initiates an MQTT connection with the CONNECT packet, IGNITE first validates the bearer token by calling the DIdP's introspection API.…”

Section: Ignitementioning

confidence: 99%

“…After the user authorises the Sample TPA to access IGNITE, the sample app is loaded. This uses MQTT over WebSockets to 2 Please note that there is another IoT framework with a similar name. These systems are unrelated and the system described here predates the other system: https://www.iot-ignite.com/ 3 https://github.com/eclipse/mosquitto.rsmb communicate and presents a simple UI, which allows users to interact with the device.…”

Section: Sample Third-party Applicationmentioning

confidence: 99%

“…Data may be validly shared by multiple cloud services but then aggregated to de-anonymise user information and infringe on privacy. We have previously identified a number of security and privacy concerns with IoT which are documented in [2].…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Cloud-based federated identity for the Internet of Things

Fremantle

Aziz

2018

Ann. Telecommun.

Self Cite

View full text Add to dashboard Cite

The Internet of Things (IoT) has significant security and privacy risks. Recent attacks have shown that not only are many IoT devices at risk of exploit, but those devices can be successfully used to attack wider systems and cause economic damage. Currently, most devices connect to a cloud service that is provided by the manufacturer of the device, offering no choice to move to more secure systems. We outline a proposed model for IoT that allows the identity of users and devices to be federated. Users and devices are issued with secure, random, anonymised identities that are not shared with third parties. We demonstrate how devices can be connected to third-party applications without inherently de-anonymising them. Sensor data and actuator commands are federated through APIs to cloud services. All access to device data and commands is based on explicit consent from users. Each user's data is handled by a personal cloud instance providing improved security and isolation, as well as providing a trusted intermediary for both devices and cloud services. We demonstrate this model is workable with a prototype system that implements the major features of the model. We present experiment results including performance, energy usage, capacity and cost metrics from the prototype. We compare this work with other related work and outline areas for discussion and future work.

show abstract

Section: Ignitementioning

confidence: 99%

Section: Sample Third-party Applicationmentioning

confidence: 99%

See 1 more Smart Citation

Cloud-based federated identity for the Internet of Things

Fremantle

Aziz

2018

Ann. Telecommun.

Self Cite

View full text Add to dashboard Cite

show abstract

“…To our knowledge, Fremantle and Scott [12] were the first authors that discussed IoT security and privacy, also considering blockchains. However, they merely remarked that blockchains may have potential in solving the cloud integrity and authentication problems for IoT, not considering the potential challenges.…”

Section: Related Workmentioning

confidence: 99%

Security and Privacy Challenges and Potential Solutions for DLT based IoT Systems

Paavolainen¹,

Nikander²

2018

2018 Global Internet of Things Summit (GIoTS)

View full text Add to dashboard Cite

The use of distributed ledger technologies introduces new security and privacy challenges. These challenges are dependent on properties of the ledgers, such as transaction latency and throughput. Some use cases may be outright impossible to implement securely, or in a privacy-retaining manner. Consequently, it is important that these concerns are taken into account when distributed ledger technologies are evaluated and selected as building blocks for higher-level systems. In this paper, we illustrate these concerns through use case examples. We discuss the implications these concerns on the use of distributed ledgers within higher-level systems, such as in SOFIE, a DLT-based approach to securely and openly federate IoT systems.

show abstract

“…In contrast, tiny objects, for instance light bulbs, may not be able to apply such techniques directly without some modifications due to their limited resources in terms of battery life, memory storage, and computational power [3,5]. To this end, several research proposals have been proposed in this regard, and they can be classified broadly into three categories: (i) gateway-based solutions [6][7][8], (ii) IoT stack-based solutions [9][10][11][12][13], and (iii) middleware-based solutions [14][15][16][17][18]. Despite the benefits of using such solutions for addressing some IoT security concerns (e.g., secure communication), they suffer from some shortcomings.…”

Section: Introductionmentioning

confidence: 99%

A Novel Methodology for Securing IoT Objects Based on their Security Level Certificates

Abdulghani¹,

Konstantas²,

Nijdam³

2020

Preprint

View full text Add to dashboard Cite

Internet of Things (IoT) provides a huge business value for customers, organizations, and governments due to the developments of so many applications in different sectors like energy and healthcare. Nevertheless, as a new emerging technology, IoT faces several security concerns that are more challenging than conventional Internet because of its limited resources as well as its complex ecosystem. Toward this end, we first highlight IoT security challenges and briefly discuss its security goals like confidentiality and integrity. Second, we discuss the most common attacks against IoT, along with their violated security goals. We also review the existing frameworks of security and privacy guidelines for IoT and illustrate their shortcomings. Third, we propose a novel framework for securing IoT objects, the key objective of which is to assign different Security Level Certificates (SLCs) for IoT objects based on their hardware capabilities and protection measures. Objects with SLCs, therefore, will be able to communicate with each other or with the Internet in a secure manner. The proposed framework is composed of five main phases. In phase 1, we classify IoT assets into four components: (i) physical objects, (ii) protocols, (iii) data at rest, and (iv) software, which includes operating systems, middlewares, and applications. We also classify IoT objects into five categories based on their hardware capabilities. In phase 2, we propose security and privacy guidelines for previously mentioned IoT assets, along with their protection measures. In phase 3, we classify protection measures into five SLCs, and then we assign different SLCs for IoT objects. In phase 4: we develop a communication plan between objects based on their SLCs. In phase 5, we propose a four-step method to seamlessly integrate our objects with legacy objects ( objects are not developed according to our framework). Fourth, the feasibility and application of this framework are illustrated using smart homes as a case study. Finally, we investigate how our framework would lessen several attacks and threats against IoT like routing attacks and physical damage. We also provide qualitative arguments to show that this framework could be utilized to solve some of IoT security challenges such as tight resource constrains. Moreover, we discuss the shortcomings of our suggested framework.

show abstract

A survey of secure middleware for the Internet of Things

Cited by 58 publications

References 95 publications

Cloud-based federated identity for the Internet of Things

Cloud-based federated identity for the Internet of Things

Security and Privacy Challenges and Potential Solutions for DLT based IoT Systems

A Novel Methodology for Securing IoT Objects Based on their Security Level Certificates

Contact Info

Product

Resources

About