LOIS: Low-cost Packet Header Protection for IoT Devices
LOIS: Low-cost Packet Header Protection for IoT Devices
复制标题
DOI：
10.1145/3576842.3582380
复制
发表时间：
2023-05
期刊：
影响因子：
--
通讯作者：
Minmei Wang;Shouqian Shi;Xiaoxue Zhang;Song Han;Chen Qian
中科院分区：
文献类型：
--
作者：
Minmei Wang;Shouqian Shi;Xiaoxue Zhang;Song Han;Chen Qian
在智能家居和智能工厂等各种应用中广泛部署的物联网设备带来了新的隐私问题。物联网设备通常会捕捉用户的活动或从周围环境收集信息，然后将信息发送到远程云服务器，通过查看数据包报头将私人信息暴露给被动的对手。因此，在增强型物联网安全协议中，保护隐私还需要隐藏数据包报头和其他流量元数据。这项工作提出了LOIS框架，一个包级的数据包报头保护器的基础上有效的一次性密钥流。LOIS允许物联网设备有效地隐藏数据包报头中的IP和端口信息，同时允许云恢复原始数据包报头。此外，LOIS可以轻松地与现有的物联网流量填充算法集成，以隐藏流量模式。我们在公共云中运行的商品服务器上实现LOIS。我们的实验结果表明，LOIS只引入适度的开销。例如，结果显示LOIS对于上传流量平均仅产生约250-365 ns的端到端延迟，这比MPLS少80%-90%。
The widely deployed IoT devices in various applications, such as smart homes and smart factories, pose new privacy concerns. IoT devices typically capture users’ activities or collect information from their surroundings and then send the information to remote cloud servers, exposing private information to passive adversaries by looking at the packet headers. Thus, in an enhanced IoT security protocol, protecting privacy also requires hiding packet headers and other traffic metadata. This work presents the LOIS framework, a packet-level packet header protector based on efficient one-time keystreams. LOIS allows IoT devices to efficiently hide the IP and port information in packet headers while allowing the cloud to recover the original packet headers. Besides, LOIS can easily integrate with existing IoT traffic padding algorithms to hide traffic patterns. We implement LOIS on commodity servers running in a public cloud. Our experimental results show that LOIS only introduces moderate overhead. For example, results show that LOIS only incurs about 250–365 ns end-to-end latency on average for the upload traffic, which is 80%–90% less than that of IPsec.