Network-Level Security for the Internet of Things: Opportunities and Challenges

Gharakheili, Hassan Habibi; Sivanathan, Arunan; Hamza, Ayyoob; Sivaraman, Vijay

doi:10.1109/mc.2019.2917972

Cited by 16 publications

(15 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Additionally, the approach is complemented by a framework called MUDdy, which allows a formal semantic validation of MUD profiles and the compatibility check of MUD policies with the restrictions defined by an organization where the device is deployed. Furthermore, MUDgee is used by [36] and [37], which proposes an IoT device classification framework, and by [38], in which the generated MUD profiles are translated into flow rules. Moreover, [39] devices.…”

Section: A Mud Profiles Generationmentioning

confidence: 99%

“…Content may change prior to final publication. [33] (MUD Maker) [34] (MUDgee) [36] (MUDgee) [37] (MUDgee) [38] (MUDgee) [39] (MUDgee) [21] (MUD Maker) [40] (MUDgee) [41] (MUDgee) [20] (security testing results [55]) [44] (devices' changing behavior in smart buildings) [32] (MUD Maker) [19] (Medium-level Security Policy Language (MSPL) [45]) [47] (QoS parameters) [42] (MUDgee) [48] (human usage aspects) [49] (physical layer parameters and flow statistics) [52] (devices' fingerprinting data) [30] (MUD Maker) [42] (MUDgee) behavioral profiles for connected devices. These aspects are further discussed in Section V.…”

Section: A Mud Profiles Generationmentioning

confidence: 99%

See 1 more Smart Citation

Defining the Behavior of IoT Devices Through the MUD Standard: Review, Challenges, and Research Directions

et al. 2021

View full text Add to dashboard Cite

With the strong development of the Internet of Things (IoT), the definition of IoT devices' intended behavior is key for an effective detection of potential cybersecurity attacks and threats in an increasingly connected environment. In 2019, the Manufacturer Usage Description (MUD) was standardized within the IETF as a data model and architecture for defining, obtaining and deploying MUD files, which describe the network behavioral profiles of IoT devices. While it has attracted a strong interest from academia, industry, and Standards Developing Organizations (SDOs), MUD is not yet widely deployed in real-world scenarios. In this work, we analyze the current research landscape around this standard, and describe some of the main challenges to be considered in the coming years to foster its adoption and deployment. Based on the literature analysis and our own experience in this area, we further describe potential research directions exploiting the MUD standard to encourage the development of secure IoTenabled scenarios.

show abstract

Section: A Mud Profiles Generationmentioning

confidence: 99%

Section: A Mud Profiles Generationmentioning

confidence: 99%

Defining the Behavior of IoT Devices Through the MUD Standard: Review, Challenges, and Research Directions

et al. 2021

View full text Add to dashboard Cite

show abstract

“…One example of this is Shodan 1 , an online platform that enables users to access vulnerable security cameras connected to the Internet [Lin and Bergmann 2016]. Besides privacy, the exposure to cyber-physical systems can incur in physical harm, such as if a denial of service attack disables a smoke alarm during a fire [Habibi Gharakheili et al 2019], or an attacker maliciously controlling remotely a thermostat.…”

Section: Introductionmentioning

confidence: 99%

INXU - A Security Extension for RFC 8520 to Give Fast Response to New Vulnerabilities on Domestic IoT Networks

Morais¹,

Farias²

2020

Anais Do VII Workshop Pré-Ietf (WPIETF 2020)

View full text Add to dashboard Cite

As domestic Internet of Things (DIoT) devices become more popular, the number of devices connected to the Internet increases. It may also represent a risk to the end-user’s security and privacy. The infected devices can be used in DIoT botnets affecting the Internet’s stability. Although there are efforts to enhance IoT security, such as RFC 8520, there still needs for improvements in the DIoT context. To ensure DIoT security, this paper proposes INXU, an extension of RFC 8520 that enables blocking traffic related to well-known malicious activities. INXU introduces the concept of Malicious Traffic Description, a data model to describe traffic related to malicious activities, and enables Security Operation Centers to protect domestic networks.

show abstract

“…These techniques are used to protect devices' data, which are shared through a blockchain platform. The resulting approach was implemented and evaluated in a real scenario, and is intended to reduce the attack surface of IoT deployments by restricting devices' communication before they join a certain network.Behavioral profiles can help to reduce the attack surface and mitigate security attacks by enforcing security policies as well as monitoring the device's expected behavior [16]. Traditionally, policy-based approaches have been used to specify the allowed/denied communications from/to a certain system.…”

mentioning

confidence: 99%

“…Behavioral profiles can help to reduce the attack surface and mitigate security attacks by enforcing security policies as well as monitoring the device's expected behavior [16]. Traditionally, policy-based approaches have been used to specify the allowed/denied communications from/to a certain system.…”

mentioning

confidence: 99%

Security Architecture for Defining and Enforcing Security Profiles in DLT/SDN-Based IoT Systems

Matheu

Robles-Enciso

Zarca

et al. 2020

Sensors

View full text Add to dashboard Cite

Despite the advantages that the Internet of Things (IoT) will bring to our daily life, the increasing interconnectivity, as well as the amount and sensitivity of data, make IoT devices an attractive target for attackers. To address this issue, the recent Manufacturer Usage Description (MUD) standard has been proposed to describe network access control policies in the manufacturing phase to protect the device during its operation by restricting its communications. In this paper, we define an architecture and process to obtain and enforce the MUD restrictions during the bootstrapping of a device. Furthermore, we extend the MUD model with a flexible policy language to express additional aspects, such as data privacy, channel protection, and resource authorization. For the enforcement of such enriched behavioral profiles, we make use of Software Defined Networking (SDN) techniques, as well as an attribute-based access control approach by using authorization credentials and encryption techniques. These techniques are used to protect devices’ data, which are shared through a blockchain platform. The resulting approach was implemented and evaluated in a real scenario, and is intended to reduce the attack surface of IoT deployments by restricting devices’ communication before they join a certain network.

show abstract

Network-Level Security for the Internet of Things: Opportunities and Challenges

Cited by 16 publications

References 5 publications

Defining the Behavior of IoT Devices Through the MUD Standard: Review, Challenges, and Research Directions

Defining the Behavior of IoT Devices Through the MUD Standard: Review, Challenges, and Research Directions

INXU - A Security Extension for RFC 8520 to Give Fast Response to New Vulnerabilities on Domestic IoT Networks

Security Architecture for Defining and Enforcing Security Profiles in DLT/SDN-Based IoT Systems

Contact Info

Product

Resources

About