The future of IoT security: special session
The future of IoT security: special session
复制标题
DOI：
--
复制
发表时间：
2018-09
期刊：
影响因子：
--
通讯作者：
Sibin Mohan;Mikael Asplund;Gedare Bloom;A. Sadeghi;Ahmad Ibrahim;Negin Salajageh;P. Griffioen;B. Sinopoli
中科院分区：
文献类型：
--
作者：
Sibin Mohan;Mikael Asplund;Gedare Bloom;A. Sadeghi;Ahmad Ibrahim;Negin Salajageh;P. Griffioen;B. Sinopoli
物联网(IoT)是一个庞大而复杂的领域。这些系统通常使用一组非常不同的硬件、软件和协议来构建。这一点，再加上匆忙投放市场的物联网解决方案/服务数量不断增加，意味着大多数此类系统都存在安全漏洞。最近发生的事件(例如Mirai僵尸网络)进一步突出了此类安全问题。随着区块链和软件定义网络(SDN)等新兴技术的出现，物联网领域可能出现新的安全解决方案。在本文中，我们将探讨物联网安全的未来趋势：(A)在物联网安全中使用区块链，(B)传感器信息的数据来源，(C)使用SDNS的可靠和安全的传输机制，(D)物联网设备的可扩展身份验证和远程证明机制，以及(E)域的威胁建模和风险/成熟度评估框架。
The Internet-of-Things (IoT) is a large and complex domain. These systems are often constructed using a very diverse set of hardware, software and protocols. This, combined with the ever increasing number of IoT solutions/services that are rushed to market means that most such systems are rife with security holes. Recent incidents (e.g., the Mirai botnet) further highlight such security issues. With emerging technologies such as blockchain and software-defined networks (SDNs), new security solutions are possible in the IoT domain. In this paper we will explore future trends in IoT security: (a) the use of blockchains in IoT security, (b) data provenance for sensor information, (c) reliable and secure transport mechanisms using SDNs (d) scalable authentication and remote attestation mechanisms for IoT devices and (e) threat modeling and risk/maturity assessment frameworks for the domain.