Challenges in Deploying CoAP Over DTLS in Resource Constrained Environments

Kwon, Hyeokjin; Park, Jiye; Kang, Namhi

doi:10.1007/978-3-319-31875-2_22

Cited by 11 publications

(7 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In the literature, several works focus on the identification of specific mitigation measures for different scenarios (see, e.g., [43][44][45][46][47][48][49][50][51][52][53][54]). In detail, the mitigations proposed by these works mainly focus on two aspects:…”

Section: Mitigationsmentioning

confidence: 99%

Security of IoT Application Layer Protocols: Challenges and Findings

Nebbione

Calzarossa

2020

Future Internet

View full text Add to dashboard Cite

IoT technologies are becoming pervasive in public and private sectors and represent presently an integral part of our daily life. The advantages offered by these technologies are frequently coupled with serious security issues that are often not properly overseen or even ignored. The IoT threat landscape is extremely wide and complex and involves a wide variety of hardware and software technologies. In this framework, the security of application layer protocols is of paramount importance since these protocols are at the basis of the communications among applications and services running on different IoT devices and on cloud/edge infrastructures. This paper offers a comprehensive survey of application layer protocol security by presenting the main challenges and findings. More specifically, the paper focuses on the most popular protocols devised in IoT environments for messaging/data sharing and for service discovery. The main threats of these protocols as well as the Common Vulnerabilities and Exposures (CVE) for their products and services are analyzed and discussed in detail. Good practices and measures that can be adopted to mitigate threats and attacks are also investigated. Our findings indicate that ensuring security at the application layer is very challenging. IoT devices are exposed to numerous security risks due to lack of appropriate security services in the protocols as well as to vulnerabilities or incorrect configuration of the products and services being deployed. Moreover, the constrained capabilities of these devices affect the types of security services that can be implemented.

show abstract

Section: Mitigationsmentioning

confidence: 99%

Security of IoT Application Layer Protocols: Challenges and Findings

Nebbione

Calzarossa

2020

Future Internet

View full text Add to dashboard Cite

show abstract

“…TinyDTLS is an open source library implementing minimum functions provided in the DTLS protocol with C language. The most up-to-date version is 0.8.2 as at the writing of this paper and it supports the DTLS 1.2 standards [6]. TinyDTLS consists of an algorithm that implements the DTLS, encryption, hash, session management, and queue management as separate modules.…”

Section: Tinydtlsmentioning

confidence: 99%

“…However, most daily life objects, which are intended to support smart service, are present as embedded forms so their computing resources such as CPU, memory, and battery are limited compared to general computing devices used in the Internet. In particular, low energy consumption of functions is the core requirement to provide services reliably and to reduce cost of developing an IoT device [6].…”

Section: Introductionmentioning

confidence: 99%

Fine-Grained Support of Security Services for Resource Constrained Internet of Things

Ban

Choi²,

Kang

2016

International Journal of Distributed Sensor Networks

Self Cite

View full text Add to dashboard Cite

Internet of Things (IoT) technologies allow everyday objects to be capable of connecting to the Internet, thereby making smart and convenient daily life. Although users' daily lives can be convenient due to various smart services utilizing IoT, it can also be a target of attack through the Internet. Thus, security has now been recognized as mandatory technology to activate IoT based smart service. Several standard organizations related to IoT technologies recommend using the CoAP over DTLS protocol stacks for enabling secure communications between resource constrained things. In general DTLS, a cipher suite required to support specific security service should be negotiated between the CoAP client and server in the process of performing the DTLS handshake protocol. However, the handshake requires too much processing and transmission overhead in constrained IoT environment. To improve such an issue, this paper proposes a secure but efficient scheme for resource constrained things. The proposed scheme can selectively apply application data encryption or integrity to the DTLS record layer during an on-going secure session, thereby reducing the burden of DTLS handshake in resource constrained Internet of Things.

show abstract

“…In addition, DTLS uses stateless encryption, thus no steam ciphers [18]. Fragmentation at the UDP level uses more device resources [35], which impacts on IoT devices. Lastly, reemission is more complex in DTLS.…”

Section: Introductionmentioning

confidence: 99%

A Security Architecture for the Internet of Things

2017

KSII TIIS

View full text Add to dashboard Cite

This paper demonstrates a case for an end-to-end pure Application Security Layer for reliable and confidential communications within an Internet of Things (IoT) constrained environment. To provide a secure key exchange and to setup a secure data connection, Transport Layer Security (TLS) is used, which provides native protection against replay attacks. TLS along with digital signature can be used to achieve non-repudiation within app-to-app communications. This paper studies the use of TLS over the JavaScript Object Notation (JSON) via a The Constrained Application Protocol (CoAP) RESTful service to verify the hypothesis that in this way one can provide end-to-end communication flexibility and potentially retain identity information for repudiation. As a proof of concept, a prototype has been developed to simulate an IoT software client with the capability of hosting a CoAP RESTful service. The prototype studies data requests via a network client establishing a TLS over JSON session using a hosted CoAP RESTful service. To prove reputability and integrity of TLS JSON messages, JSON messages was intercepted and verified against simulated MITM attacks. The experimental results confirm that TLS over JSON works as hypothesised.

show abstract

Challenges in Deploying CoAP Over DTLS in Resource Constrained Environments

Cited by 11 publications

References 10 publications

Security of IoT Application Layer Protocols: Challenges and Findings

Security of IoT Application Layer Protocols: Challenges and Findings

Fine-Grained Support of Security Services for Resource Constrained Internet of Things

A Security Architecture for the Internet of Things

Contact Info

Product

Resources

About