IoTCop: A Blockchain-Based Monitoring Framework for Detection and Isolation of Malicious Devices in Internet-of-Things Systems
IoTCop: A Blockchain-Based Monitoring Framework for Detection and Isolation of Malicious Devices in Internet-of-Things Systems
复制标题
DOI：
10.1109/jiot.2020.3022033
复制
发表时间：
2021-03
影响因子：
10.6
通讯作者：
Sreenivas Sudarshan Seshadri;D. Rodríguez;Mukunda Subedi;K. Choo;S. Ahmed;Qian Chen;Junghee Lee
中科院分区：
文献类型：
--
作者：
Sreenivas Sudarshan Seshadri;D. Rodríguez;Mukunda Subedi;K. Choo;S. Ahmed;Qian Chen;Junghee Lee
与容纳在集中和安全的室内环境中的传统服务器（例如，数据中心），诸如传感器/致动器之类的物联网（IoT）设备在地理上是分布式的，并且可能位于利用IoT设备的物理系统附近。然而，物联网设备的资源受限性质限制了它们部署复杂安全解决方案的能力。所提出的方法假设设备可能受到危害，因此需要能够自动隔离受危害的设备。为了即使在设备受到损害时也能执行安全策略，我们建议在监控框架中使用区块链。与现有的集中式或分布式安全解决方案（不考虑解决方案本身可能受到损害的可能性）不同，只要大多数设备不受损害，拟议的基于区块链的框架就可以执行安全策略。通过采用许可区块链（Hyperledger Fabric）和附加硬件模块，与无许可区块链框架（例如，以太坊），并允许现有的物联网设备加入框架而无需修改。
Unlike conventional servers housed in a centralized and secured indoor environment (e.g., data centers), Internet-of-Things (IoT) devices such as sensor/actuator are geographically distributed and may be closely located to the physical systems where IoT devices are utilized. However, the resource-constrained nature of IoT devices limits their capacity to deploy sophisticated security solutions. The proposed approach assumes that a device can be compromised and hence, the need to be able to automatically isolate the compromised device(s). In order to enforce security policies even when devices are compromised, we propose using blockchain in the monitoring framework. Unlike existing centralized or distributed security solutions (which do not consider the possibility that the solutions themselves can be compromised), the proposed blockchain-based framework can enforce the security policies as long as a majority of the devices are not compromised. By employing the permissioned blockchain (Hyperledger Fabric) and add-on hardware modules, the proposed framework offers significantly lower latency and overhead compared to permissionless blockchain frameworks (e.g., Ethereum) and allows existing IoT devices to join the framework without modification.