Evaluating CoAP, OSCORE, DTLS and HTTPS for Secure Device Communication

Kristofer  Nedergaard; Bhupjit Singh; Birger Andersen

doi:10.1007/978-3-031-25222-8_10

Evaluating CoAP, OSCORE, DTLS and HTTPS for Secure Device Communication

Kristofer Nedergaard, Bhupjit Singh^*, Birger Andersen

^*Corresponding author for this work

Department of Engineering Technology and Didactics

Technical University of Denmark

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

The purpose of this paper is to explore the differences and relations between the protocols CoAP, OSCORE, DTLS and HTTPS. Our focus is at performance and the general security benefits of the different protocols. We evaluate the feasibility of using CoAP encrypted with OSCORE or DTLS as opposed to using HTTPS/1.1 or HTTPS/3. We find the CoAP based solutions to be more performant than HTTPS, however we also find them to be harder to implement, less widespread and potentially more insecure than HTTPS. From these findings, in most scenarios we recommend implementing solutions based on HTTPS if the performance and overhead can be tolerated.

Original language	English
Title of host publication	Proceedings of EAI International Conference on the Internet of Everything
Editors	Teresa Pereira, John Impagliazzo, Henrique Santos
Number of pages	15
Publisher	Springer
Publication date	2023
Pages	117-132
ISBN (Print)	978-3-031-25221-1
ISBN (Electronic)	978-3-031-25222-8
DOIs	https://doi.org/10.1007/978-3-031-25222-8_10
Publication status	Published - 2023
Event	2022 EAI International Conference on the Internet of Everything - Online conference, Portugal Duration: 16 Sept 2022 → 17 Sept 2022 https://ioecon.eai-conferences.org/2022/

Conference

Conference	2022 EAI International Conference on the Internet of Everything
Location	Online conference
Country/Territory	Portugal
Period	16/09/2022 → 17/09/2022
Internet address	https://ioecon.eai-conferences.org/2022/

Series	Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering
Volume	458
ISSN	1867-8211

Keywords

CoAP
OSCORE
DTLS
HTTPS
Secure communication

Access to Document

10.1007/978-3-031-25222-8_10

OpenUrl availability

Full text

Cite this

Nedergaard, Kristofer ; Singh, Bhupjit ; Andersen, Birger. / Evaluating CoAP, OSCORE, DTLS and HTTPS for Secure Device Communication. Proceedings of EAI International Conference on the Internet of Everything. editor / Teresa Pereira ; John Impagliazzo ; Henrique Santos. Springer, 2023. pp. 117-132 (Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, Vol. 458).

@inproceedings{be8008d0251840e0bbb31a84c5f697d9,

title = "Evaluating CoAP, OSCORE, DTLS and HTTPS for Secure Device Communication",

abstract = "The purpose of this paper is to explore the differences and relations between the protocols CoAP, OSCORE, DTLS and HTTPS. Our focus is at performance and the general security benefits of the different protocols. We evaluate the feasibility of using CoAP encrypted with OSCORE or DTLS as opposed to using HTTPS/1.1 or HTTPS/3. We find the CoAP based solutions to be more performant than HTTPS, however we also find them to be harder to implement, less widespread and potentially more insecure than HTTPS. From these findings, in most scenarios we recommend implementing solutions based on HTTPS if the performance and overhead can be tolerated.",

keywords = "CoAP, OSCORE, DTLS, HTTPS, Secure communication",

author = "Kristofer Nedergaard and Bhupjit Singh and Birger Andersen",

year = "2023",

doi = "10.1007/978-3-031-25222-8_10",

language = "English",

isbn = "978-3-031-25221-1",

series = "Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering",

publisher = "Springer",

pages = "117--132",

editor = "Teresa Pereira and John Impagliazzo and Henrique Santos",

booktitle = "Proceedings of EAI International Conference on the Internet of Everything",

note = "2022 EAI International Conference on the Internet of Everything, EAI IoECon 2022 ; Conference date: 16-09-2022 Through 17-09-2022",

url = "https://ioecon.eai-conferences.org/2022/",

}

Nedergaard, K, Singh, B & Andersen, B 2023, Evaluating CoAP, OSCORE, DTLS and HTTPS for Secure Device Communication. in T Pereira, J Impagliazzo & H Santos (eds), Proceedings of EAI International Conference on the Internet of Everything. Springer, Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, vol. 458, pp. 117-132, 2022 EAI International Conference on the Internet of Everything, Portugal, 16/09/2022. https://doi.org/10.1007/978-3-031-25222-8_10

Evaluating CoAP, OSCORE, DTLS and HTTPS for Secure Device Communication. / Nedergaard, Kristofer ; Singh, Bhupjit; Andersen, Birger.
Proceedings of EAI International Conference on the Internet of Everything. ed. / Teresa Pereira; John Impagliazzo; Henrique Santos. Springer, 2023. p. 117-132 (Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, Vol. 458).

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - Evaluating CoAP, OSCORE, DTLS and HTTPS for Secure Device Communication

AU - Nedergaard, Kristofer

AU - Singh, Bhupjit

AU - Andersen, Birger

PY - 2023

Y1 - 2023

N2 - The purpose of this paper is to explore the differences and relations between the protocols CoAP, OSCORE, DTLS and HTTPS. Our focus is at performance and the general security benefits of the different protocols. We evaluate the feasibility of using CoAP encrypted with OSCORE or DTLS as opposed to using HTTPS/1.1 or HTTPS/3. We find the CoAP based solutions to be more performant than HTTPS, however we also find them to be harder to implement, less widespread and potentially more insecure than HTTPS. From these findings, in most scenarios we recommend implementing solutions based on HTTPS if the performance and overhead can be tolerated.

AB - The purpose of this paper is to explore the differences and relations between the protocols CoAP, OSCORE, DTLS and HTTPS. Our focus is at performance and the general security benefits of the different protocols. We evaluate the feasibility of using CoAP encrypted with OSCORE or DTLS as opposed to using HTTPS/1.1 or HTTPS/3. We find the CoAP based solutions to be more performant than HTTPS, however we also find them to be harder to implement, less widespread and potentially more insecure than HTTPS. From these findings, in most scenarios we recommend implementing solutions based on HTTPS if the performance and overhead can be tolerated.

KW - CoAP

KW - OSCORE

KW - DTLS

KW - HTTPS

KW - Secure communication

U2 - 10.1007/978-3-031-25222-8_10

DO - 10.1007/978-3-031-25222-8_10

M3 - Article in proceedings

SN - 978-3-031-25221-1

T3 - Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering

SP - 117

EP - 132

BT - Proceedings of EAI International Conference on the Internet of Everything

A2 - Pereira, Teresa

A2 - Impagliazzo, John

A2 - Santos, Henrique

PB - Springer

T2 - 2022 EAI International Conference on the Internet of Everything

Y2 - 16 September 2022 through 17 September 2022

ER -

Nedergaard K, Singh B, Andersen B. Evaluating CoAP, OSCORE, DTLS and HTTPS for Secure Device Communication. In Pereira T, Impagliazzo J, Santos H, editors, Proceedings of EAI International Conference on the Internet of Everything. Springer. 2023. p. 117-132. (Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, Vol. 458). doi: 10.1007/978-3-031-25222-8_10

Evaluating CoAP, OSCORE, DTLS and HTTPS for Secure Device Communication

Abstract

Conference

Keywords

Access to Document

OpenUrl availability

Fingerprint

Cite this