Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security最新文献

Intrusion Detection in the RPL-connected 6LoWPAN Networks rpl连接的6LoWPAN网络中的入侵检测

Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security Pub Date : 2017-04-02 DOI: 10.1145/3055245.3055252

Dharmini Shreenivas, S. Raza, T. Voigt

{"title":"Intrusion Detection in the RPL-connected 6LoWPAN Networks","authors":"Dharmini Shreenivas, S. Raza, T. Voigt","doi":"10.1145/3055245.3055252","DOIUrl":"https://doi.org/10.1145/3055245.3055252","url":null,"abstract":"The interconnectivity of 6LoWPAN networks with the Internet raises serious security concerns, as constrained 6LoWPAN devices are accessible anywhere from the untrusted global Internet. Also, 6LoWPAN devices are mostly deployed in unattended environments, hence easy to capture and clone. Despite that state of the art crypto solutions provide information security, IPv6 enabled smart objects are vulnerable to attacks from outside and inside 6LoWPAN networks that are aimed to disrupt networks. This paper attempts to identify intrusions aimed to disrupt the Routing Protocol for Low-Power and Lossy Networks (RPL).In order to improve the security within 6LoWPAN networks, we extend SVELTE, an intrusion detection system for the Internet of Things, with an intrusion detection module that uses the ETX (Expected Transmissions) metric. In RPL, ETX is a link reliability metric and monitoring the ETX value can prevent an intruder from actively engaging 6LoWPAN nodes in malicious activities. We also propose geographic hints to identify malicious nodes that conduct attacks against ETX-based networks. We implement these extensions in the Contiki OS and evaluate them using the Cooja simulator.","PeriodicalId":215275,"journal":{"name":"Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security","volume":"23 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-04-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133962696","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 64

Session details: Session 1: Design & Primitives 会议细节:会议1:设计和原语

Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security Pub Date : 2017-04-02 DOI: 10.1145/3254082

S. Raza

引用次数: 0

Secure Data Provenance for the Internet of Things 物联网的安全数据来源

Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security Pub Date : 2017-04-02 DOI: 10.1145/3055245.3055255

M. Aman, K. Chua, B. Sikdar

引用次数: 78

Ring-LWE Ciphertext Compression and Error Correction: Tools for Lightweight Post-Quantum Cryptography 环- lwe密文压缩和纠错:轻量级后量子密码的工具

Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security Pub Date : 2017-04-02 DOI: 10.1145/3055245.3055254

Markku-Juhani O. Saarinen

{"title":"Ring-LWE Ciphertext Compression and Error Correction: Tools for Lightweight Post-Quantum Cryptography","authors":"Markku-Juhani O. Saarinen","doi":"10.1145/3055245.3055254","DOIUrl":"https://doi.org/10.1145/3055245.3055254","url":null,"abstract":"Some lattice-based public key cryptosystems allow one to transform ciphertext from one lattice or ring representation to another efficiently and without knowledge of public and private keys. In this work we explore this lattice transformation property from cryptographic engineering viewpoint. We apply ciphertext transformation to compress Ring-LWE ciphertexts and to enable efficient decryption on an ultra-lightweight implementation targets such as Internet of Things, Smart Cards, and RFID applications. Significantly, this can be done without modifying the original encryption procedure or its security parameters. Such flexibility is unique to lattice-based cryptography and may find additional, unique real-life applications. Ciphertext compression can significantly increase the probability of decryption errors. We show that the frequency of such errors can be analyzed, measured and used to derive precise failure bounds for n-bit error correction. We introduce XECC, a fast multi-error correcting code that allows constant time implementation in software. We use these tools to construct and explore TRUNC8, a concrete Ring-LWE encryption and authentication system. We analyze its implementation, security, and performance. We show that our lattice compression technique reduces ciphertext size by more than 40% at equivalent security level, while also enabling public key cryptography on previously unreachable ultra-lightweight platforms. The experimental public key encryption and authentication system has been implemented on an 8-bit AVR target, where it easily outperforms elliptic curve and RSA-based proposals at similar security level. Similar results have been obtained with a Cortex M0 implementation. The new decryption code requires only a fraction of the software footprint of previous Ring-LWE implementations with the same encryption parameters, and is well suited for hardware implementation.","PeriodicalId":215275,"journal":{"name":"Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security","volume":"16 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-04-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121426278","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 22

Session details: Keynote Address 会议详情:主题演讲

Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security Pub Date : 2017-04-02 DOI: 10.1145/3254081

Christina Poepper

引用次数: 0

Session details: Session 2: Attacks & Preventions 会话详细信息:会话2:攻击与预防

Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security Pub Date : 2017-04-02 DOI: 10.1145/3254083

Markku-Juhani O. Saarinen

引用次数: 0

Blockchain Engineering for the Internet of Things: Systems Security Perspective 物联网区块链工程:系统安全视角

Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security Pub Date : 2017-04-02 DOI: 10.1145/3055245.3055256

D. Svetinovic

{"title":"Blockchain Engineering for the Internet of Things: Systems Security Perspective","authors":"D. Svetinovic","doi":"10.1145/3055245.3055256","DOIUrl":"https://doi.org/10.1145/3055245.3055256","url":null,"abstract":"The Internet of Things (IoT) technology has a potential to bring the benefits of intelligently interconnecting not just computers and humans, but most of everyday things. IoT has a promise of opening significant business process improvement opportunities leading to economic growth and cost reductions. However, there are many challenges facing IoT, including significant scalability and security challenges due to the integration of potentially huge number of things into the network. Many of scalability and security issues stem from a centralized, primarily client/server, architecture of IoT systems and frameworks. Blockchain technology, as a relativelly new approach to decentralized computation and assets management and transfer, has a potential to help solve a number of scalability and security issues that IoT is facing, primarilly through the removal of centralized points of failure for such systems. As such, blockchain technology and IoT integration provides a promising direction and it has recently generated significant research interest, e.g., [4]. In this talk, we present our experiences based on our recent project in enhancing security and privacy in decentralized energy trading in smart grids using blockchain, multi-signatures and anonymous messaging streams [1], that has built upon our previous work on Bitcoin-based decentralized carbon emissions trading infrastructure model [2]. In particular, we present the blockchain systems security issues within the context of IoT security and privacy requirements [3]. This is done with the intention of producing an early integrated security model for blockchain-powered IoT systems [5]. The presentation is constrained to the discussion of the architecture-level requirements [6]. Finally, we will present the main opportunity loss if the integration ignores the full realization of the real-world asset transaction paradigm.","PeriodicalId":215275,"journal":{"name":"Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-04-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128999120","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8

IoTScanner: Detecting Privacy Threats in IoT Neighborhoods IoTScanner:检测物联网社区中的隐私威胁

Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security Pub Date : 2017-04-02 DOI: 10.1145/3055245.3055253

S. Siby, R. Maiti, Nils Ole Tippenhauer

引用次数: 67

Let the Cat Out of the Bag: A Holistic Approach Towards Security Analysis of the Internet of Things 让猫从袋子里出来:物联网安全分析的整体方法

Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security Pub Date : 2017-04-02 DOI: 10.1145/3055245.3055251

V. Sachidananda, Shachar Siboni, A. Shabtai, Jinghui Toh, Suhas Bhairav, Y. Elovici

引用次数: 39

Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security 第三届ACM物联网隐私、信任和安全国际研讨会论文集

Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security Pub Date : 2016-05-30 DOI: 10.1145/3055245

Richard Chow, G. Saldamli

引用次数: 1