Analyzing the communication security between smartphones and IoT based on CORAS

Motalib Hossain Bhuyan; Nur A. Azad; Weizhi Meng; Christian D. Jensen

doi:10.1007/978-3-030-02744-5_19

Analyzing the communication security between smartphones and IoT based on CORAS

Motalib Hossain Bhuyan, Nur A. Azad, Weizhi Meng, Christian D. Jensen

Technical University of Denmark

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

The exponential growth of Internet-of-Things (IoT) devices and applications may expose tremendous security vulnerabilities in practice, as there are different protocols in the application layer to exchange sensor data, e.g., MQTT, AMQP, CoAP. For the MQTT protocol, IoT devices would publish a plain message that could potentially cause loss of data integrity and data stealing. Motivated by this, we first present a risk assessment on the communication channel between smartphones and IoT using the method of CORAS, which is a model-based security risk analysis framework. Then the paper analyzes several known cryptographic methods and mechanisms to identify which cryptography solution best fits resource constrained IoT devices. Further, we discuss appropriate cryptographic algorithms that can help protect data integrity between smartphones and IoT.

Original language	English
Title of host publication	Proceedings of 12th International Conference on Network and System Security
Volume	11058
Publisher	Springer
Publication date	2018
Pages	251-265
ISBN (Print)	9783030027438
DOIs	https://doi.org/10.1007/978-3-030-02744-5_19
Publication status	Published - 2018
Event	12th International Conference on Network and System Security - Hong Kong Polytechnic University, Hong Kong, China Duration: 27 Aug 2018 → 29 Aug 2018 Conference number: 12

Conference

Conference	12th International Conference on Network and System Security
Number	12
Location	Hong Kong Polytechnic University
Country/Territory	China
City	Hong Kong
Period	27/08/2018 → 29/08/2018

Series	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	11058
ISSN	0302-9743

Keywords

CORAS
Data integrity
Internet-of-Things
Network security
Risk assessment
Smartphone security

Access to Document

10.1007/978-3-030-02744-5_19

OpenUrl availability

Full text

Cite this

Bhuyan, Motalib Hossain ; Azad, Nur A. ; Meng, Weizhi et al. / Analyzing the communication security between smartphones and IoT based on CORAS. Proceedings of 12th International Conference on Network and System Security. Vol. 11058 Springer, 2018. pp. 251-265 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), Vol. 11058).

@inproceedings{ec0a8256d626471f8fba73e4577ebbd4,

title = "Analyzing the communication security between smartphones and IoT based on CORAS",

abstract = "The exponential growth of Internet-of-Things (IoT) devices and applications may expose tremendous security vulnerabilities in practice, as there are different protocols in the application layer to exchange sensor data, e.g., MQTT, AMQP, CoAP. For the MQTT protocol, IoT devices would publish a plain message that could potentially cause loss of data integrity and data stealing. Motivated by this, we first present a risk assessment on the communication channel between smartphones and IoT using the method of CORAS, which is a model-based security risk analysis framework. Then the paper analyzes several known cryptographic methods and mechanisms to identify which cryptography solution best fits resource constrained IoT devices. Further, we discuss appropriate cryptographic algorithms that can help protect data integrity between smartphones and IoT.",

keywords = "CORAS, Data integrity, Internet-of-Things, Network security, Risk assessment, Smartphone security",

author = "Bhuyan, {Motalib Hossain} and Azad, {Nur A.} and Weizhi Meng and Jensen, {Christian D.}",

year = "2018",

doi = "10.1007/978-3-030-02744-5_19",

language = "English",

isbn = "9783030027438",

volume = "11058",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer",

pages = "251--265",

booktitle = "Proceedings of 12th International Conference on Network and System Security",

note = "12th International Conference on Network and System Security, NSS-2018 ; Conference date: 27-08-2018 Through 29-08-2018",

}

Bhuyan, MH, Azad, NA, Meng, W & Jensen, CD 2018, Analyzing the communication security between smartphones and IoT based on CORAS. in Proceedings of 12th International Conference on Network and System Security. vol. 11058, Springer, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 11058, pp. 251-265, 12th International Conference on Network and System Security, Hong Kong, China, 27/08/2018. https://doi.org/10.1007/978-3-030-02744-5_19

Analyzing the communication security between smartphones and IoT based on CORAS. / Bhuyan, Motalib Hossain; Azad, Nur A.; Meng, Weizhi et al.
Proceedings of 12th International Conference on Network and System Security. Vol. 11058 Springer, 2018. p. 251-265 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), Vol. 11058).

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - Analyzing the communication security between smartphones and IoT based on CORAS

AU - Bhuyan, Motalib Hossain

AU - Azad, Nur A.

AU - Meng, Weizhi

AU - Jensen, Christian D.

N1 - Conference code: 12

PY - 2018

Y1 - 2018

N2 - The exponential growth of Internet-of-Things (IoT) devices and applications may expose tremendous security vulnerabilities in practice, as there are different protocols in the application layer to exchange sensor data, e.g., MQTT, AMQP, CoAP. For the MQTT protocol, IoT devices would publish a plain message that could potentially cause loss of data integrity and data stealing. Motivated by this, we first present a risk assessment on the communication channel between smartphones and IoT using the method of CORAS, which is a model-based security risk analysis framework. Then the paper analyzes several known cryptographic methods and mechanisms to identify which cryptography solution best fits resource constrained IoT devices. Further, we discuss appropriate cryptographic algorithms that can help protect data integrity between smartphones and IoT.

AB - The exponential growth of Internet-of-Things (IoT) devices and applications may expose tremendous security vulnerabilities in practice, as there are different protocols in the application layer to exchange sensor data, e.g., MQTT, AMQP, CoAP. For the MQTT protocol, IoT devices would publish a plain message that could potentially cause loss of data integrity and data stealing. Motivated by this, we first present a risk assessment on the communication channel between smartphones and IoT using the method of CORAS, which is a model-based security risk analysis framework. Then the paper analyzes several known cryptographic methods and mechanisms to identify which cryptography solution best fits resource constrained IoT devices. Further, we discuss appropriate cryptographic algorithms that can help protect data integrity between smartphones and IoT.

KW - CORAS

KW - Data integrity

KW - Internet-of-Things

KW - Network security

KW - Risk assessment

KW - Smartphone security

U2 - 10.1007/978-3-030-02744-5_19

DO - 10.1007/978-3-030-02744-5_19

M3 - Article in proceedings

SN - 9783030027438

VL - 11058

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 251

EP - 265

BT - Proceedings of 12th International Conference on Network and System Security

PB - Springer

T2 - 12th International Conference on Network and System Security

Y2 - 27 August 2018 through 29 August 2018

ER -

Bhuyan MH, Azad NA, Meng W, Jensen CD. Analyzing the communication security between smartphones and IoT based on CORAS. In Proceedings of 12th International Conference on Network and System Security. Vol. 11058. Springer. 2018. p. 251-265. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), Vol. 11058). doi: 10.1007/978-3-030-02744-5_19

Analyzing the communication security between smartphones and IoT based on CORAS

Abstract

Conference

Keywords

Access to Document

OpenUrl availability

Fingerprint

Cite this