A Secure and Efficient Cluster-Based Authentication Scheme for Internet of Things (IoTs)

Abstract

IPv6 over Low Power Wireless Personal Area Network (6LoWPAN) provides IP connectivity to the highly constrained nodes in the Internet of Things (IoTs). 6LoWPAN allows nodes with limited battery power and storage capacity to carry IPv6 datagrams over the lossy and error-prone radio links offered by the IEEE 802.15.4 standard, thus acting as an adoption layer between the IPv6 protocol and IEEE 802.15.4 network. The data link layer of IEEE 802.15.4 in 6LoWPAN is based on AES (Advanced Encryption Standard), but the 6LoWPAN standard lacks and has omitted the security and privacy requirements at higher layers. The sensor nodes in 6LoWPAN can join the network without requiring the authentication procedure. Therefore, from security perspectives, 6LoWPAN is vulnerable to many attacks such as replay attack, Man-in-the-Middle attack, Impersonation attack, and Modification attack. This paper proposes a secure and efficient cluster-based authentication scheme (CBAS) for highly constrained sensor nodes in 6LoWPAN. In this approach, sensor nodes are organized into a cluster and communicate with the central network through a dedicated sensor node. The main objective of CBAS is to provide efficient and authentic communication among the 6LoWPAN nodes. To ensure the low signaling overhead during the registration, authentication, and handover procedures, we also introduce lightweight and efficient registration, de-registration, initial authentication, and handover procedures, when a sensor node or group of sensor nodes join or leave a cluster. Our security analysis shows that the proposed CBAS approach protects against various security attacks, including Identity Confidentiality attack, Modification attack, Replay attack, Man-in-the-middle attack, and Impersonation attack. Our simulation experiments show that CBAS has reduced the registration delay by 11%, handoff authentication delay by 32%, and signaling cost

The Study on Assessment of Security Web Applications

“…2-Broken Authentication [20]: Authentication enables applications to identify and verify their users. As a consequence, deactivated authentication may enable attackers to get access to and acquire the same rights as the target user, resulting in significant security holes in the online application.…”

How to punish cyber criminals: A study to investigate the target and consequence based punishments for malware attacks in UK, USA, China, Ethiopia & Pakistan

“…Over the years, there has been a significant increase in the number of cyber attacks worldwide, leading to extensive damage [1] [2] . They are often attacks on the information system, to get, change or temper the data, hence achieving any ultimate goal e.g.…”

“…Purchasing malware is also incredibly easy - it can be done in just a few minutes. Paid malware tools typically come with customer support, including free updates and troubleshooting services [8] [2] .…”

Identification of Fraud Apps Using Sentiment Analysis Techniques

“…The increase in the number of applications makes it difficult for users to choose the appropriate application for them in several aspects, the most important of which is the safety of that application. By some estimates, one out of every 36 mobile devices have high-risk apps installed [1]. Determining an application's security is not easy, especially for those who do not have any technological knowledge, so we decided to determine the level of security for the application by analyzing user reviews using sentiment analysis, which studies have proven successful in many areas.…”