Updating IoT devices: challenges and potential approaches

Hernández-Ramos, José L.; Baldini, Gianmarco; Matheu, Sara N.; Skarmeta, Antonio F.

doi:10.1109/giots49054.2020.9119514

Cited by 19 publications

(16 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The edge-devices are reviewed in terms of technology rather than development tools [24]. The secure update protocols and tools are also reviewed [25]. This is another problem, but it is not related to our research question.…”

Section: Related Workmentioning

confidence: 99%

A New Multi-Target Compiler Architecture for Edge-Devices and Cloud Management

Gokcay

2022

Gazi University Journal of Science

View full text Add to dashboard Cite

show abstract

Section: Related Workmentioning

confidence: 99%

A New Multi-Target Compiler Architecture for Edge-Devices and Cloud Management

Gokcay

2022

Gazi University Journal of Science

View full text Add to dashboard Cite

show abstract

“…The software or firmware update is still a challenge and many software update approaches and challenges for the IoT devices in the context of security have been discussed [160]. One of the approaches is the IEEE Software Updates for Internet of Things (SUIT) [161] working group and the blockchain.…”

Section: B Mud and Software Updates For Internet Of Things (Suit)mentioning

confidence: 99%

“…The automated installation of updates is possible and can be achieved if integrated with MUD, this restricts the device communication. This made the IEEE SUIT working group combine MUD with the SUIT approach for reliable automation in software updates [160].…”

Section: B Mud and Software Updates For Internet Of Things (Suit)mentioning

confidence: 99%

Role of Device Identification and Manufacturer Usage Description in IoT Security: A Survey

et al. 2021

View full text Add to dashboard Cite

This paper presents an overview of device identification techniques and the Manufacturer Usage Description (MUD) standard used for the Internet of things to reduce the IoT attack surface. The ongoing diversity and the sheer increase in the number of connected IoT devices have crumpled security efforts. There is a need to reconsider and redesign the underlying concept of developing security systems to resolve IoT security challenges. In this backdrop, device profiling and identification have emerged as an exciting technique that helps to reduce IoT device attack surface. One of the known approaches for device identification is to fingerprint a device. There are many ways to fingerprint the device, mostly using device network flows or device local attributes. The device identification ensures the authenticity of the device attached to the network, like user authentication. Since IoT devices mostly work using machine-to-machine (M2M) communication, this requires identifying each device properly. But there is no unified approach for device identification for the ever-growing world of IoT devices and applications. One of the major steps forward in this direction is the development of the Manufacturer Usage Description (MUD) standard that defines the role of a device within the network. It limits the device to execute the primary task only, which will help to reduce the attack surface. Since the inception of MUD, many security frameworks use this standard for IoT security. However, there is a need to scrutinize the security frameworks based on the MUD, to find out the claimed effectiveness of the standard in IoT security. This paper initially identifies and classifies the potential vulnerabilities in IoT devices. Then, the study provides an overview of the research that focuses on device identification techniques and analyzes their role in IoT security. Finally, the research presents an overview of MUD technology, its implementation scenarios, the limitation of the latest MUD standard, and its applications in the industry. The prime aim of this work is to examine the MUD benefits in IoT security along with the weaknesses and challenges while implementing this standard along with future directions. INDEX TERMSManufacturer usage description (MUD), Internet of Things (IoT), device identification (DI), software defined network (SDN), machine learning (ML), deep learning (DL). NOMAN MAZHAR received the B.E. degree in software engineering and the M.S. degree in information technology from the

show abstract

“…Operational stability and security are two critical factors of every IoT network and application. Both can be achieved with frequent firmware roll-outs [4]. However, autonomous firmware update without physical proximity is susceptible to adverse wireless medium conditions, can drastically increase the rollout times, or lead to downtimes.…”

Section: Introductionmentioning

confidence: 99%

Reliable IoT Firmware Updates: A Large-scale Mesh Network Performance Investigation

Mavromatis¹,

Stanoev²,

Portelli³

et al. 2022

Preprint

View full text Add to dashboard Cite

Internet of Things (IoT) networks require regular firmware updates to ensure enhanced security and stability. As we move towards methodologies of codifying security and policy decisions and exchanging them over IoT large-scale deployments (security-as-a-code), these demands should be considered a routine operation. However, rolling out firmware updates to large-scale networks presents a crucial challenge for constrained wireless environments with large numbers of IoT devices. This paper initially investigates how the current state-of-theart protocols operate in such adverse conditions by measuring various Quality-of-Service (QoS) Key Performance Indicators (KPIs) of the shared wireless medium. We later discuss how Concurrent Transmissions (CT) can extend the scalability of IoT protocols and ensure reliable firmware roll-outs over large geographical areas. Measuring KPIs such as the mesh join time, the throughput, and the number of nodes forming a network, we provide great insight into how an IoT environment will behave under a large-scale firmware roll-out. Finally, we conducted our performance investigation over the UMBRELLA platform, a realworld IoT testbed deployed in Bristol, UK. This ensures our findings represent a realistic IoT scenario and meet the strict QoS requirements of today's IoT applications.

show abstract

Updating IoT devices: challenges and potential approaches

Cited by 19 publications

References 22 publications

A New Multi-Target Compiler Architecture for Edge-Devices and Cloud Management

A New Multi-Target Compiler Architecture for Edge-Devices and Cloud Management

Role of Device Identification and Manufacturer Usage Description in IoT Security: A Survey

Reliable IoT Firmware Updates: A Large-scale Mesh Network Performance Investigation

Contact Info

Product

Resources

About