Performance Evaluations of IoT Device Virtualization for Efficient Resource Utilization

Ogawa, Kazuhiko; Sekine, Hibiki; Kanai, Kazuaki; Nakamura, Kenichi; Kanemitsu, Hidehiro; Katto, Jiro; Nakazato, Hidenori

doi:10.1109/giots.2019.8766410

Cited by 7 publications

(7 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Fig. 10 shows the total backup capacity utilization referring to the objective function (8). For the in-plane topology, our Heuristic give near-optimal results.…”

Section: B Resultsmentioning

confidence: 99%

“…Virtualization techniques helps to place those services over the physical network and then establish their inter-communication according to their requirements. Besides, as especially the safetycritical services should be protected against any disruption such as attacks or failures, the virtualization enables dynamic failover schemes like migrating/recovering services after node failures [8], [9]. When standard safety concepts like replicating devices and services alone are not sufficient in the presence of sophisticated attackers, such a flexibility in design provides resilience against failures and attacks, maintaining availability with graceful degradation in worst-case or full recovery again.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Service-Based Resilience via Shared Protection in Mission-Critical Embedded Networks

Ergenç

Rak

Fischer

2021

IEEE Trans. Netw. Serv. Manage.

View full text Add to dashboard Cite

Mission-critical networks, which for example can be found in autonomous cars and avionics, are complex systems with a multitude of interconnected embedded nodes and various service demands. Their resilience against failures and attacks is a crucial property and has to be already considered in their design phase. In this paper, we introduce a novel approach for optimal joint service allocation and routing, leveraging virtualized embedded devices and shared backup capacity for the fault-tolerant design of mission-critical networks. This approach operates in phases utilizing multiple optimization models. Furthermore, we propose a new heuristic that ensures resource efficiency and faulttolerance against single node and link failures as prerequisite for resilience. Our experiments for different application scenarios indicate that our heuristic achieves results close to the optimum and provides 50% of capacity gain compared to a dedicated capacity protection scheme. Moreover, our heuristic ensures faulttolerance against at least 90% of all potential single node failures.

show abstract

“…Fig. 10 shows the total backup capacity utilization referring to the objective function (8). For the in-plane topology, our Heuristic give near-optimal results.…”

Section: B Resultsmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Service-Based Resilience via Shared Protection in Mission-Critical Embedded Networks

Ergenç

Rak

Fischer

2021

IEEE Trans. Netw. Serv. Manage.

View full text Add to dashboard Cite

show abstract

“…IoT devices are very heterogeneous, ranging from very constrained sensors to heavier embedded systems, in order to deal with all the new and various business opportunities. For instance, some new use cases incorporate the Cloud-to-Thing Continuum [1] and increased virtualisation [2] for the smallest devices to make the IoT device simpler to code, more portable, easier to deploy and in the end cheaper to produce with increased efficiency for the ecosystem.…”

Section: Introductionmentioning

confidence: 99%

Nested compartmentalisation for constrained devices

Dejon

Gaber

Grimaud

2021

2021 8th International Conference on Future Internet of Things and Cloud (FiCloud)

View full text Add to dashboard Cite

This paper presents a framework and implementation guidelines to set up nested compartmentalisation in constrained devices. All memory spaces are protected by the Memory Protection Unit (MPU). Current MPU-based systems offer efficient memory protection but are mostly tied to the fixed permission model provided by their operating system, kernel, hypervisor or by code instrumentation. New use cases evolve with the rise of the Internet of Things (IoT) ecosystems where software components could benefit from locally and dynamically established permissions. This includes a temporary nested subspace with restricted memory access rights. Our framework integrates subspace creation and management for runtime dynamic changes of the permission model for any level of abstraction. Global security policies of fixed permission models are reflected in the software architecture and the implementation of the framework. We also demonstrate the feasibility of providing nested compartmentalisation by showing how to leverage the MPU features.

show abstract

“…These studies have suggested various meaningful ideas to efficiently make IoT devices perform new roles or actions beyond those defined during their initial deployment. There also have been many studies on how to use network resource as efficiently as possible in IoT environments [ 6 , 7 ]. To contribute toward strengthening the interoperability and dynamicity of IoT platforms, we suggest a method for transferring system images to IoT devices.…”

Section: Introductionmentioning

confidence: 99%

“…This can cause a network transmission delay in an IoT platform, which is fatal for the IoT platforms that require real-time operations. To deal with this problem, there have been a number of research studies focusing on using network resource as efficiently as possible [ 6 , 7 ]. In this regard, we think managing network resource efficiently is an important topic to consider in IoT platforms.…”

Section: Introductionmentioning

confidence: 99%

FLEX-IoT: Secure and Resource-Efficient Network Boot System for Flexible-IoT Platform

Park

Kim

Yun

et al. 2021

Sensors

View full text Add to dashboard Cite

In an internet of things (IoT) platform with a copious number of IoT devices and active variation of operational purpose, IoT devices should be able to dynamically change their system images to play various roles. However, the employment of such features in an IoT platform is hindered by several factors. Firstly, the trivial file transfer protocol (TFTP), which is generally used for network boot, has major security vulnerabilities. Secondly, there is an excessive demand for the server during the network boot, since there are numerous IoT devices requesting system images according to the variation of their roles, which exerts a heavy network overhead on the server. To tackle these challenges, we propose a system termed FLEX-IoT. The proposed system maintains a FLEX-IoT orchestrater which uses an IoT platform operation schedule to flexibly operate the IoT devices in the platform. The IoT platform operation schedule contains the schedules of all the IoT devices on the platform, and the FLEX-IoT orchestrater employs this schedule to flexibly change the mode of system image transfer at each moment. FLEX-IoT consists of a secure TFTP service, which is fully compatible with the conventional TFTP, and a resource-efficient file transfer method (adaptive transfer) to streamline the system performance of the server. The proposed secure TFTP service comprises of a file access control and attacker deception technique. The file access control verifies the identity of the legitimate IoT devices based on the hash chain shared between the IoT device and the server. FLEX-IoT provides security to the TFTP for a flexible IoT platform and minimizes the response time for network boot requests based on adaptive transfer. The proposed system was found to significantly increase the attack-resistance of TFTP with little additional overhead. In addition, the simulation results show that the volume of transferred system images on the server decreased by 27% on average, when using the proposed system.

show abstract

Performance Evaluations of IoT Device Virtualization for Efficient Resource Utilization

Cited by 7 publications

References 16 publications

Service-Based Resilience via Shared Protection in Mission-Critical Embedded Networks

Service-Based Resilience via Shared Protection in Mission-Critical Embedded Networks

Nested compartmentalisation for constrained devices

FLEX-IoT: Secure and Resource-Efficient Network Boot System for Flexible-IoT Platform

Contact Info

Product

Resources

About