SUPnP: Secure Access and Service Registration for UPnP-Enabled Internet of Things

Kayas, Golam; Hossain, Mahmud; Payton, Jamie; Islam, S. M. Riazul

doi:10.1109/jiot.2021.3058699

Cited by 2 publications

(2 citation statements)

References 33 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It is important to highlight that integrating CapBAC with a straightforward attribute-based access control approach proves to be effective in Universal Plug-and-Play (UPnP)-enabled IoT systems. This combination facilitates a more nuanced and decentralized solution, enhancing the overall system's efficiency and security [170].…”

Section: Analysis and Comparisonmentioning

confidence: 99%

A Holistic Analysis of Internet of Things (IoT) Security: Principles, Practices, and New Perspectives

Hossain,

Kayas,

Hasan

et al. 2024

Future Internet

Self Cite

View full text Add to dashboard Cite

Driven by the rapid escalation of its utilization, as well as ramping commercialization, Internet of Things (IoT) devices increasingly face security threats. Apart from denial of service, privacy, and safety concerns, compromised devices can be used as enablers for committing a variety of crime and e-crime. Despite ongoing research and study, there remains a significant gap in the thorough analysis of security challenges, feasible solutions, and open secure problems for IoT. To bridge this gap, we provide a comprehensive overview of the state of the art in IoT security with a critical investigation-based approach. This includes a detailed analysis of vulnerabilities in IoT-based systems and potential attacks. We present a holistic review of the security properties required to be adopted by IoT devices, applications, and services to mitigate IoT vulnerabilities and, thus, successful attacks. Moreover, we identify challenges to the design of security protocols for IoT systems in which constituent devices vary markedly in capability (such as storage, computation speed, hardware architecture, and communication interfaces). Next, we review existing research and feasible solutions for IoT security. We highlight a set of open problems not yet addressed among existing security solutions. We provide a set of new perspectives for future research on such issues including secure service discovery, on-device credential security, and network anomaly detection. We also provide directions for designing a forensic investigation framework for IoT infrastructures to inspect relevant criminal cases, execute a cyber forensic process, and determine the facts about a given incident. This framework offers a means to better capture information on successful attacks as part of a feedback mechanism to thwart future vulnerabilities and threats. This systematic holistic review will both inform on current challenges in IoT security and ideally motivate their future resolution.

show abstract

Section: Analysis and Comparisonmentioning

confidence: 99%

A Holistic Analysis of Internet of Things (IoT) Security: Principles, Practices, and New Perspectives

Hossain,

Kayas,

Hasan

et al. 2024

Future Internet

Self Cite

View full text Add to dashboard Cite

show abstract

“…packets for its operation, making it unsuitable for IoT applications. The Universal Plug and Play (UPnP) supports the zero-configuration concept based on standard Internet Protocol [7]. However, it has security issues like any device which supports UPnP assumes the surrounding network as trusted, which is risky in wireless sensor based IoT networks.…”

Section: Introductionmentioning

confidence: 99%

Hybrid Centralized Peer to Peer Architecture for Resource Discovery and Secure Communication in Internet of Things

Bhajantri¹,

S²

2023

Int. J. Adv. Sci. Eng. Inf. Technol.

View full text Add to dashboard Cite

The Internet of Things (IoT) made communication between people and objects easy. It helps to build smart cities, homes, manufacturing systems, health monitoring systems, etc., for mankind. The increased adoption of IoT applications enabled many smart devices on the Internet platform. These devices deployed across the globe may have varying computational and communication capabilities. It is a great challenge to manage IoT resources efficiently. Some of well-known protocols are defined to identify and access IoT resources locally in a real-world environment. Many authors have adopted the Distributed Hash Table (D.H.T.) based Peer to Peer (P2P) model for global and massive resource management. However, D.H.T. based solutions have many shortcomings and are not perfectly suitable for the IoT domain. In this paper, it has been proposed a novel Hybrid Centralized Peer to Peer (HCP2P) architecture for efficient resource discovery and access mechanism. The proposed solution builds a secure communication channel among trusted peer devices with the aid of an HCP2P server. The trusted devices can discover and access the required resource efficiently and securely with reduced load on the central server. The proposed HCP2P solutions are evaluated on both hardware prototypes and simulations. The proposed model gives almost constant resource registration, discovery, and access time. This evaluation showed that HCP2P architecture performance is superior to traditional DHT-based P2P architecture. Finally, the performance parameters of the proposed scheme are evaluated in terms of resource registration time, discovery time, and hop-count.

show abstract

SUPnP: Secure Access and Service Registration for UPnP-Enabled Internet of Things

Cited by 2 publications

References 33 publications

A Holistic Analysis of Internet of Things (IoT) Security: Principles, Practices, and New Perspectives

A Holistic Analysis of Internet of Things (IoT) Security: Principles, Practices, and New Perspectives

Hybrid Centralized Peer to Peer Architecture for Resource Discovery and Secure Communication in Internet of Things

Contact Info

Product

Resources

About