Security towards the edge: Sticky policy enforcement for networked smart objects

Sicari, Sabrina; Miorandi, Daniele; Coen‐Porisini, Alberto

doi:10.1016/j.is.2017.07.006

Cited by 21 publications

(39 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Moreover, they state the access control rules, the scope, and other relevant aspects related to the associated data. As a consequence, an enforcement system to manage sticky policies, coupled with a security and privacy‐aware IoT middleware, has been defined and applied in this paper to a real smart home scenario.…”

Section: Introductionmentioning

confidence: 99%

“…The system presented in Reference is called NetwOrked Smart object (NOS) . Each NOS has been conceived following the IoT general‐purpose approach.…”

Section: Introductionmentioning

confidence: 99%

“…Data provided by different IoT contexts, such as smart home/building, smart transportation system, e‐health environment, and so on, can be managed. In Reference , the NOS platform has been integrated with an enforcement framework based on sticky policies, thus allowing the owners of the data to express their preferences regarding the access to their resources. It is a matter of fact that users are often not fully aware of the constraints applied to their information or are not aware of the level of consent they have granted for the use of the data .…”

Section: Introductionmentioning

confidence: 99%

“…It is a matter of fact that users are often not fully aware of the constraints applied to their information or are not aware of the level of consent they have granted for the use of the data . Such limitations must be overcome by designing efficient solutions that are able to support users in their decisions and to automatically protect sensitive or private data, as proposed in Reference .…”

Section: Introductionmentioning

confidence: 99%

“…In this paper, the strategy adopted in Reference is further validated by means of a real‐world case study in the smart home domain. Based on the authors' knowledge, this is the first application of sticky policies in the smart home scenario.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Securing the smart home: A real case study

Sicari

Miorandi

Coen‐Porisini

2018

Internet Technology Letters

Self Cite

View full text Add to dashboard Cite

Both people and organizations are widely accepting and adopting of the functionalities offered by the smart home or smart building applications. This is due to the many advantages, in easing users' everyday life and work, provided by the emerging Internet of Things (IoT) technologies and devices—equipped with sensors, cameras, or actuators—and the ability to either to acquire information from the environment or to perform proper tasks. The main features of smart homes/buildings include real‐time monitoring, remote control, safety from intruders, gas/fire alarm, and so on. Because sensitive and private information is managed within smart homes/buildings, security and privacy solutions must be put in place in order to protect users/businesses' data against violation attempts as well as to guarantee the provision of reliable services. To this end, rules—in the form of policies—associated with the smart home/building resources must be defined and correctly enforced by means of a robust framework for handling the huge amount of IoT data managed. In this paper, the effectiveness and potentialities of a strategy based on sticky policies, integrated into a security and privacy‐aware IoT middleware, are demonstrated within a smart home scenario. A test bed is developed using real datasets in order to conduct analysis on the execution times, response times to detected attacks, and memory occupancy of the proposed approach.

show abstract

Section: Introductionmentioning

confidence: 99%

“…The system presented in Reference is called NetwOrked Smart object (NOS) . Each NOS has been conceived following the IoT general‐purpose approach.…”

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Securing the smart home: A real case study

Sicari

Miorandi

Coen‐Porisini

2018

Internet Technology Letters

Self Cite

View full text Add to dashboard Cite

show abstract

Securing the access control policies to the Internet of Things resources through permissioned blockchain

Sicari

Miorandi

Coen‐Porisini

2022

Concurrency and Computation

Self Cite

View full text Add to dashboard Cite

Security and privacy of information transmitted among the devices involved in anInternet of Things (IoT) network represent relevant issues in IoT contexts. Guaranteeing effective control and supervising access permissions to IoT applications is a complex task, mainly due to resources' heterogeneity and scalability requirements. The design and development of highly customizable access control policies, along with an efficient mechanism for ensuring that the rules applied by the IoT platform are not tampered with or violated, will undoubtedly have a significant impact on the diffusion of IoT-based solutions. In such a direction, the article proposes the integration of a permissioned blockchain within an honest-but-curious (i.e., not trusted) IoT distributed middleware layer, which aims to guarantee the correct management of access to resources by the interested parties. The result is a robust and lightweight system, able to manage the data produced by IoT devices, support relevant security features, such as integrity and confidentiality, and resist different kinds of attacks. The use of blockchain will ensure the tamper-resistance and synchronization of the distributed system, where various stakeholders own applications and IoT platforms. The methodology and the proposed architecture are validated employing a test-bed.

show abstract

A Security Model for IoT Networks

Gabillon

Bruno

2018

Future Data and Security Engineering

View full text Add to dashboard Cite

Security towards the edge: Sticky policy enforcement for networked smart objects

Cited by 21 publications

References 12 publications

Securing the smart home: A real case study

Securing the smart home: A real case study

Securing the access control policies to the Internet of Things resources through permissioned blockchain

A Security Model for IoT Networks

Contact Info

Product

Resources

About