Low power link layer security for IoT: Implementation and performance analysis

Abstract

In this paper, we present the implementation and performance evaluation of security functionalities at the link layer of IEEE 802.15.4-compliant IoT devices. Specifically, we implement the required encryption and authentication mechanisms entirely in software and as well exploit the hardware ciphers that are made available by our IoT platform. Moreover, we present quantitative results on the memory footprint, the execution time and the energy consumption of selected implementation modes and discuss some relevant tradeoffs. As expected, we find that hardware-based implementations are not only much faster, leading to latencies shorter than two orders of magnitude compared to software-based security suites, but also provide substantial savings in terms of ROM memory occupation, i.e. up to six times, and energy consumption. Furthermore, the addition of hardware-based security support at the link layer only marginally impacts the network lifetime metric, leading to worst-case reductions of just 2% compared to the case where no security is employed. This is due to the fact that energy consumption is dominated by other factors, including the transmission and reception of data packets and the control traffic that is required to maintain the network structures for routing and data collection. On the other hand, entirely software-based implementations are to be avoided as the network lifetime reduction in this case can be as high as 25%.

On Privacy and Security Challenges in Smart Connected Homes

“…This involves techniques such as hardware encryption, fail-secure device design, and device-based access control mechanisms. Approaches that propose embedding security architectures, including enhancing the Datagram Transport Layer Security [16] and implementing within hardware ciphers IEEE 802.15.4-compliant link layer security procedures [17] have been suggested. Also, optimized versions of cryptographic algorithms, such as the ECDSA, have been developed for constrained environments.…”

An experimental study of security and privacy risks with emerging household appliances

“…Some researchers propose to standardize IoT communication protocols, for example, DTLS optimization has been suggested to secure the IoT data exchange [5]. Implementation of IEEE 802.15.4-compliant link layer security procedures is advised in [6] and a lightweight encryption/decryption method for ID authentication among nodes in sensor layer has been presented in [7]. Concepts from Artificial Immune System (AIS) have been imported to detect attacks on IoT and have used those concepts to develop an IoT intrusion detection system with dynamic defense [8], [9].…”

Link‐layer security in TSCH networks: effect on slot duration

“…Reference studies the performance of the AES‐CCM at the link layer and compares it to other well‐known cryptography schemes. The authors show that, even though AES is not the most efficient block cypher in terms of code size and time performance, its well‐known security properties, as well as the possibility to perform it in hardware, make it the most suitable solution.…”

“…At the time of this writing, several contributions already investigated the effects of security operations in IoT systems on system capabilities . Nevertheless, for the best of authors' knowledge, they only focus on the legacy IEEE802.15.4‐2011 , and no studies on IIoT networks based on TSCH are yet available (TSCH was not present in the legacy IEEE802.15.4‐2011 standard, while it was introduced in the IEEE802.15.4e amendment, in 2012, and maintained in the latest version of the standard, that is, IEEE802.15.4‐2015 ).…”