An Edge-Fog Secure Self-Authenticable Data Transfer Protocol

Abstract

Development of the Internet of Things (IoT) opens many new challenges. As IoT devices are getting smaller and smaller, the problems of so-called “constrained devices” arise. The traditional Internet protocols are not very well suited for constrained devices comprising localized network nodes with tens of devices primarily communicating with each other (e.g., various sensors in Body Area Network communicating with each other). These devices have very limited memory, processing, and power resources, so traditional security protocols and architectures also do not fit well. To address these challenges the Fog computing paradigm is used in which all constrained devices, or Edge nodes, primarily communicate only with less-constrained Fog node device, which collects all data, processes it and communicates with the outside world. We present a new lightweight secure self-authenticable transfer protocol (SSATP) for communications between Edge nodes and Fog nodes. The primary target of the proposed protocol is to use it as a secure transport for CoAP (Constrained Application Protocol) in place of UDP (User Datagram Protocol) and DTLS (Datagram Transport Layer Security), which are traditional choices in this scenario. SSATP uses modified header fields of standard UDP packets to transfer additional protocol handling and data flow management information as well as user data authentication information. The optional redundant data may be used to provide increased resistance to data losses when protocol is used in unreliable networks. The results of experiments presented in this paper show that SSATP is a better choice than UDP with DTLS in the cases, where the CoAP block transfer mode is used and/or in lossy networks.

Dynamic Scheduling Algorithm for Delay-Sensitive Vehicular Safety Applications in Cellular Network

“…The round robin algorithm can get the user fairness performance while the best CQI can get the max system throughput. The PF (proportion fairness) algorithm makes a tradeoff between throughput and user fairness [29], [24]. However, the above studies rarely have focused on the service delay of information and therefore they are not suitable for the vehicular safety message.…”

“…Paper [20] studies the offload schedule problem of IoT equipment in the edge computing with leveraging the Lyapunov technique, and then solve it by decomposing this problem into the Knapsack problems. Paper [29] presents a lightweight secure self-authenticable transfer protocol for communications between Edge nodes and Fog nodes, which could be also applied in the context of vehicular networks.…”

Addressless: Enhancing IoT Server Security Using IPv6

“…In Fog computing, how to enhance the security in the low-resources edge devices is a big problem. Venckauskas et al introduce SSATP [16], a lightweight protocol used as a secure transport for CoAP instead of UDP and DTLS for communications between Edge nodes and Fog nodes. Venckauskas et al also introduce LSSP [17], a lightweight secure streaming protocol for the fog computing, which modifies UDP packets to embed authentication data into streaming data.…”

“…Other security solutions are focused on specific scenarios, for example, 6LowPsec [9] is based on 6LowPAN [8], which is a solution of wireless personal area networks; SSATP [16] [9] works on the data link layer and the sublayer. TLS, DTLS and related protocols such as SSATP [16] and LSSP [17] work at transport layer and application layer. As a result, our model is independent of these solutions and compatible with the protocols at the other layer, such as SSATP or LSSP.…”

Network Intrusion Detection with a Hashing Based Apriori Algorithm Using Hadoop MapReduce

“…Intrusion detection scrutinizes computer activities for the purpose of uncovering violations [1]. The activity is especially relevant for new technologies such as smartphones [2], cloud computing [3], fog computing [4], and edge computing [5], where private and business data is shared across computer or wireless sensor networks, thus increasing the likelihood of attacks [6].…”