Efficient adaptive framework for securing the Internet of Things devices

Abstract

The research on the Internet of Things (IoT) has made huge strides forward in the past couple of years. IoT has its applications in almost every walk of life, and it is being regarded as the next big thing that can change the way humans perceive about their daily life. Smart IoT devices of heterogeneous nature make an essential part of modern day IoT-based systems. The security of these devices is of paramount importance as they handle an enormous amount of critical data and its breach can lead to potentially life-threatening situations. To secure the IoT devices of heterogeneous nature, we formulated a weighted optimization problem in this work. The objective function of this problem is to secure the IoT devices while finding the best trade-off between their resource usage and throughput. To achieve the objective, we consider a pool of five different implementations of Advanced Encryption Standard (AES) cryptographic schemes that offer varied resources and throughput numbers. These implementation schemes are mapped to IoT devices of heterogeneous nature. The mapping is performed through a novel adaptive framework that can consider different weights for resources and throughput to eventually find the best trade-off between the resources and throughput of an IoT-based system. This framework considers the resource and throughput requirements of different IoT devices and uses the Hungarian algorithm to adaptively map different AES implementations on them. Extensive experimentation is performed where the best trade-off is found through varying resource and throughput weight combinations. The comparison of the proposed framework with random and greedy approaches is also performed. Comparison results show that the proposed framework adaptively secures the IoT-based system while providing better resource usage and throughput results. The proposed framework provides, on average, 11% and 17% better throughput and 3% and 13% better resource usage results as compared to random and greedy approach, respectively.

A low-area design of two-factor authentication using DIES and SBI for IoT security

“…where the values of c[0] − c [7] and r[0] − r [7] represent the challenge values and response values, respectively.…”

“…This DIES increases the randomness in AID, challenge, device nonce and server nonce by independently controlling the odd and even bits of multiplier and multiplicand, the Odd Invert and Even Invert bit, respectively. This will reduce linearity in random data by ( 5) challenge(C) = {c [7], c [6], c [5], c [4]…”

“…( 9), ( 10), ( 11) and (12), respectively. (7) ones = ones + 1 zeroes = zeroes even = even + 1 odd = odd (8) ones = ones zeroes = zeroes + 1 even = even odd = odd (9) AID = {∼ in} (10) AID = {in [7], ∼ in [6], in [5], ∼ in [4], in [3], ∼ in [2], in [1], ∼ in[0]} Similarly, the challenge, device nonce and server nonce are calculated by using the aforementioned process of DIES. The generated AID, challenge, device nonce and server nonce are used to establish the secure communications between the device and server communication.…”

“…The design process and miniaturizing processing techniques are used to improve the IoT. Hence, an improved design process and communication protocol result in high energy storage capacity, high data rate and significant computing capacity [7,8]. The information exchange between the IoT devices is affected due to the theft, privacy violation and cyber-attacks.…”

A Survey on Securing IoT Ecosystems and Adaptive Network Vision

“…This could provide an environment to look for general and standardized security decisions that suit the high demand of dynamic IoT applications and smart devices. There were numerous research studies and research lately on adaptive security in the field of IoT [2][3][4]. We intend to achieve this goal by doing a comprehensive survey on available adaptive security measures in the IoT world, additionally we will try to explore the existing application or internet security domain and try to see if some of these security practices can fit into the IoT space.…”