Secure bootstrapping of nodes in a CoAP network

Bergmann, Olaf; Gerdes, Stefanie; Schäfer, Silke; Junge, Florian; Bormann, Carsten

doi:10.1109/wcncw.2012.6215494

Cited by 14 publications

(12 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It is worth mentioning there is also another set of solutions [ 64 , 65 , 66 , 67 , 68 , 69 ] that show the need for a bootstrapping process but they do not consider EAP or AAA infrastructures as part of their solution. In this sense, they do not support federated authentication and authorization, so limiting the deployment to small or medium scale scenarios.…”

Section: State Of the Artmentioning

confidence: 99%

Lightweight CoAP-Based Bootstrapping Service for the Internet of Things

García-Carrillo

Marin-Lopez

2016

Sensors

View full text Add to dashboard Cite

The Internet of Things (IoT) is becoming increasingly important in several fields of industrial applications and personal applications, such as medical e-health, smart cities, etc. The research into protocols and security aspects related to this area is continuously advancing in making these networks more reliable and secure, taking into account these aspects by design. Bootstrapping is a procedure by which a user obtains key material and configuration information, among other parameters, to operate as an authenticated party in a security domain. Until now solutions have focused on re-using security protocols that were not developed for IoT constraints. For this reason, in this work we propose a design and implementation of a lightweight bootstrapping service for IoT networks that leverages one of the application protocols used in IoT : Constrained Application Protocol (CoAP). Additionally, in order to provide flexibility, scalability, support for large scale deployment, accountability and identity federation, our design uses technologies such as the Extensible Authentication Protocol (EAP) and Authentication Authorization and Accounting (AAA). We have named this service CoAP-EAP. First, we review the state of the art in the field of bootstrapping and specifically for IoT. Second, we detail the bootstrapping service: the architecture with entities and interfaces and the flow operation. Third, we obtain performance measurements of CoAP-EAP (bootstrapping time, memory footprint, message processing time, message length and energy consumption) and compare them with PANATIKI. The most significant and constrained representative of the bootstrapping solutions related with CoAP-EAP. As we will show, our solution provides significant improvements, mainly due to an important reduction of the message length.

show abstract

Section: State Of the Artmentioning

confidence: 99%

Lightweight CoAP-Based Bootstrapping Service for the Internet of Things

García-Carrillo

Marin-Lopez

2016

Sensors

View full text Add to dashboard Cite

show abstract

“…In the literature, several works focus on the identification of specific mitigation measures for different scenarios (see, e.g., [43][44][45][46][47][48][49][50][51][52][53][54]). In detail, the mitigations proposed by these works mainly focus on two aspects:…”

Section: Mitigationsmentioning

confidence: 99%

“…In fact, it allows a node to collect the information necessary to join a CoAP-enabled network as an authenticated node. In this framework, Bergmann et al [44] propose a three-step process to bootstrap a new node. The process starts with a discovery phase where the new node is detected.…”

mentioning

confidence: 99%

Security of IoT Application Layer Protocols: Challenges and Findings

Nebbione

Calzarossa

2020

Future Internet

View full text Add to dashboard Cite

IoT technologies are becoming pervasive in public and private sectors and represent presently an integral part of our daily life. The advantages offered by these technologies are frequently coupled with serious security issues that are often not properly overseen or even ignored. The IoT threat landscape is extremely wide and complex and involves a wide variety of hardware and software technologies. In this framework, the security of application layer protocols is of paramount importance since these protocols are at the basis of the communications among applications and services running on different IoT devices and on cloud/edge infrastructures. This paper offers a comprehensive survey of application layer protocol security by presenting the main challenges and findings. More specifically, the paper focuses on the most popular protocols devised in IoT environments for messaging/data sharing and for service discovery. The main threats of these protocols as well as the Common Vulnerabilities and Exposures (CVE) for their products and services are analyzed and discussed in detail. Good practices and measures that can be adopted to mitigate threats and attacks are also investigated. Our findings indicate that ensuring security at the application layer is very challenging. IoT devices are exposed to numerous security risks due to lack of appropriate security services in the protocols as well as to vulnerabilities or incorrect configuration of the products and services being deployed. Moreover, the constrained capabilities of these devices affect the types of security services that can be implemented.

show abstract

“…Other works discuss secure healthcare architecture and communication of nodes in a Constrained Application Protocol (CoAP; an application layer protocol that is prepared for use in Internet devices in IoT smart homes, such as wireless sensor network nodes) network [19], as well as security challenges between heterogeneous devices and different applications in smart homes [7]. Some studies focus on password security and applications for IoT smart home systems [20] [21], secure software updates in smart home devices, and security system devices (e.g., surveillance cameras) and their use in smart homes [22].…”

Section: High (H)mentioning

confidence: 99%

Internet of Things (IoT) of Smart Home: Privacy and Security

Shouran¹,

Ashari²,

Priyambodo³

2019

IJCA

View full text Add to dashboard Cite

The smart home is an environment, where heterogeneous electronic devices and appliances are networked together to provide smart services in a ubiquitous manner to the individuals. organization and people are wide accepting and adopting the functionalities offered by the smart home applications. this can be because of the various advantages, in easing users' everyday life and work, provided by the rising internet of Things (IoT) technologies and devices, equipped with sensors, cameras, or actuators, and able either to accumulate information from the environment or to perform proper tasks. the main features of smart homes embrace realtime monitoring, remote control, safety from intruders, gas/fire alarm, and so on. Since among smart homes, sensitive and personal data are managed, security and privacy solutions should be put in place, to protect users/businesses' data against violation try still on guarantee the supply of reliable services. As IoT home devices become increasingly ubiquitous, study's findings and recommendations contribute to the broader understanding of users' evolving attitudes towards privacy in smart homes.

show abstract

Secure bootstrapping of nodes in a CoAP network

Cited by 14 publications

References 10 publications

Lightweight CoAP-Based Bootstrapping Service for the Internet of Things

Lightweight CoAP-Based Bootstrapping Service for the Internet of Things

Security of IoT Application Layer Protocols: Challenges and Findings

Internet of Things (IoT) of Smart Home: Privacy and Security

Contact Info

Product

Resources

About