Regulating IoT Messages

Gabillon, Alban; Bruno, Emmanuel

doi:10.1007/978-3-319-99807-7_29

Cited by 5 publications

(6 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Rule 16 says that subscriptions are forbidden for sensors, while rule 17 says that sensors can subscribe (at any (12) freq(hasPublished(_, alarms∕#, _), 152, 24).…”

Section: Conflict Resolution Policymentioning

confidence: 99%

“…In [12,13], we describe a first proof-of-concept prototype. This first prototype is based on (i) OWL2 ontologies for representing nodes, topics and events, (ii) SWRL [20] rules for representing the security policy, and (iii) an OWL2 [21] inference engine for computing a security decision (allow/ deny).…”

Section: Prototypementioning

confidence: 99%

“…Therefore, we can translate any security rule defined with our model into an SHACL shape/ rule. Instead of processing security rules with a generic rule reasoner as we did in our first prototype [12,13], we now translate our security rules into SHACL shapes/rules. We apply that these SHACL shapes/rules to RDF publication/ subscription requests to produce security decisions.…”

Section: Architecturementioning

confidence: 99%

“…Our model supports positive and negative authorizations and allows us to express various types of context-based policies, including policies based on the frequency of events. This paper is an extension of two papers we previously published [12,13]. In this paper, we give a more complete definition of our security model, including the security policy administration model.…”

Section: Introductionmentioning

confidence: 99%

“…We also present a new version of our prototype of access control enforcement system. The prototype we sketched in [12,13] was based on SWRL and OWL2. Although it showed the feasibility of our approach, it proved to be inefficient in term of performance.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Access Controls for IoT Networks

2019

Self Cite

View full text Add to dashboard Cite

The message queuing telemetry transport (MQTT) protocol is becoming the main protocol for the internet of things (IoT). In this paper, we define a highly expressive attribute-based access control (ABAC) security model for the MQTT protocol. Our model allows us to regulate not only publications and subscriptions, but also distribution of messages to subscribers. We can express various types of contextual security rules (temporal security rules, content-based security rules, rules based on the frequency of events, etc.).

show abstract

“…Rule 16 says that subscriptions are forbidden for sensors, while rule 17 says that sensors can subscribe (at any (12) freq(hasPublished(_, alarms∕#, _), 152, 24).…”

Section: Conflict Resolution Policymentioning

confidence: 99%

Section: Prototypementioning

confidence: 99%

Section: Architecturementioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Access Controls for IoT Networks

2019

Self Cite

View full text Add to dashboard Cite

show abstract

Enhanced dynamic team access control for collaborative Internet of Things using context

Djilali

Tandjaoui

Khemissa

2020

Trans Emerging Tel Tech

View full text Add to dashboard Cite

Summary The development of the Internet of Things (IoT) aims to overcome security issues especially in critical areas that require integrity, confidentiality and a high level of privacy of the data. Among security challenges, the access control model should be well defined and adapted to the characteristics and security requirements of IoT applications. The work presented here proposes big enforcement of security for dynamic team access control using context information in order to provide granular and secure authorizations with different access control levels related to collaborative IoT. The enhanced dynamic team access control (EDTMAC) model introduces a formal theoretical model which relies on the top of the role‐based access control model. The use of different context information with a global context information security policy and security rules raised the model strength against unauthorized access and avoided security breaches such as the leak of information by providing the least privileges for the users. The result of EDTMAC analysis shows that the model is well adapted to IoT dynamic nature and collaborative IoT activities for teams. Moreover, the model is flexible and scalable, user‐driven, reliable, and secure against unauthorized access requests. The developed model supports the well‐known least‐privilege principle and separation of duties for the team members. In addition, it allows easy management of the teams, provides fine‐grained access control authorizations and supports delegation.

show abstract

A Security Model for IoT Networks

Gabillon

Bruno

2018

Future Data and Security Engineering

View full text Add to dashboard Cite

Regulating IoT Messages

Cited by 5 publications

References 9 publications

Access Controls for IoT Networks

Access Controls for IoT Networks

Enhanced dynamic team access control for collaborative Internet of Things using context

A Security Model for IoT Networks

Contact Info

Product

Resources

About