Lithe: Lightweight Secure CoAP for the Internet of Things

Raza, Shahid; Shafagh, Hossein; Hewage, Kasun; Hummen, René; Voigt, Thiemo

doi:10.1109/jsen.2013.2277656

Cited by 335 publications

(176 citation statements)

References 14 publications

Supporting

Mentioning

166

Contrasting

Unclassified

Order By: Relevance

“…More specifically, the IETF has standardized 6LoWPAN (IPv6 over Low-Power Wireless Personal Area Networks), ROLL (routing over lowpower and lossy-networks), and CoAP (constrained application protocol) to equip constrained devices (Cai et al 2014;Chen et al 2014;Esad-Djou 2014;Gu et al 2014;Hoyland et al 2014;HP Company 2014;Kang et al 2014;Keoh et al 2014;Li and Xiong 2013;Li et al 2014a;Oppliger 2011;Raza et al 2013;Roe 2014;Tan et al 2014;Wang and Wu 2010;Xiao et al 2014;Xu et al 2014a;Xu et al 2014b;Yao et al (WPA2) or 802.1AE (MACsec). In recent, the security standards for the RFID market have been reported in (Raza et al 2012).…”

Section: State-of-the-artmentioning

confidence: 99%

The Internet of Things: a security point of view

2016

View full text Add to dashboard Cite

Purpose – The purpose of this paper is to provide an in-depth overview of the security requirements and challenges for Internet of Things (IoT) and discuss security solutions for various enabling technologies and implications to various applications. Design/methodology/approach – Security requirements and solutions are analysed based on a four-layer framework of IoT on sensing layer, network layer, service layer, and application layer. The cross-layer threats are analysed followed by the security discussion for the enabling technologies including identification and tracking technologies, WSN and RFID, communication, networks, and service management. Findings – IoT calls for new security infrastructure based on the new technical standards. As a consequence, new security design for IoT shall pay attention to these new standards. Security at both the physical devices and service-applications is critical to the operation of IoT, which is indispensable for the success of IoT. Open problems remain in a number of areas, such as security and privacy protection, network protocols, standardization, identity management, trusted architecture, etc. Practical implications – The implications to various applications including supervisory control and data acquisition, enterprise systems, social IoT are discussed. The paper will serve as a starting point for future IoT security design and management. The security strategies for IoT should be carefully designed by managing the tradeoffs among security, privacy, and utility to provide security in multi-layer architecture of IoT. Originality/value – The paper synthesizes the current security requirements for IoT and provides a clear framework of security infrastructure based on four layers. Accordingly, the security requirements and potential threats in the four-layer architecture are provided in terms of general devices security, communication security, network security, and application security.

show abstract

Section: State-of-the-artmentioning

confidence: 99%

The Internet of Things: a security point of view

2016

View full text Add to dashboard Cite

show abstract

“…All of this implies that an adequate trade-off between security and a lightweight implementation of DTLS has to be provided. In [66], two compression schemes for DLTS were proposed to provide compression of handshake and application data messages which is around 36% of the header length. In [67], a lightweight solution was presented which reduces the number of requests to perform the session and is robust to replay attack, DoS and chosen cipher text.…”

Section: Attacks and Security Mechanisms For Coap Application Layermentioning

confidence: 99%

A Survey of Potential Security Issues in Existing Wireless Sensor Network Protocols

Tomić

McCann

2017

IEEE Internet Things J.

232

115

View full text Add to dashboard Cite

Abstract-The increasing pervasiveness of Wireless Sensor Networks (WSNs) in diverse application domains including critical infrastructure systems, sets an extremely high security bar in the design of WSN systems to exploit their full benefits, increasing trust while avoiding loss. Nevertheless, a combination of resource restrictions and the physical exposure of sensor devices inevitably cause such networks to be vulnerable to security threats, both external and internal. While several researchers have provided a set of open problems and challenges in WSN security and privacy, there is a gap in the systematic study of the security implications arising from the nature of existing communication protocols in WSNs. Therefore, we have carried out a deep-dive into the main security mechanisms and their effects on the most popular protocols and standards used in WSN deployments i.e. IEEE 802.15.4, B-MAC, 6LoWPAN, RPL, BCP, CTP, and CoAP, where potential security threats and existing countermeasures are discussed at each layer of WSN stack. This work culminates in a deeper analysis of network layer attacks deployed against the RPL routing protocol. We quantify the impact of individual attacks on the performance of a network using the Cooja network simulator. Finally, we discuss new research opportunities in network layer security and how to use Cooja as a benchmark for developing new defenses for WSN systems.

show abstract

“…In [23], Kawamoto et al suggested to realize a global-scaled IoT federation by utilizing satellite data links to connect remote IoT fragments together. In IoT systems, while an average packet loss rate of around 25% is expected, delays due to retransmissions can be shortened by compressing data and avoiding packet fragmentations [24]. Wu et al stated that data collection systems based on the ordinary IEEE 802.11 standard can suffer from performance degradations when devices are sharing a single channel [25].…”

Section: Related Workmentioning

confidence: 99%

Concurrent Data Collection Trees for IoT Applications

Cheng

Ganganath

Fok

2017

IEEE Trans. Ind. Inf.

View full text Add to dashboard Cite

Abstract-Internet of Things (IoT) systems comprise massive volumes of smart devices. Through exchanges of information, smart objects are capable of reasoning and generate higher level of intelligence. The effectiveness of data collection processes is a key factor to the success of IoT systems as it can seriously affect the freshness of the captured data. Efficient data collection processes have been well-studied on sensory systems with static topologies and single data extraction point. Smart devices in IoT systems are often shared by different parties, therefore concurrent data collection processes are always expected. Such a unique characteristic of IoT systems has imposed new challenges to the designs of efficient data collection processes. In this paper, concurrent data collection trees specifically designed for IoT applications are proposed. It is shown that, comparing with an existing single-user data collection structure, systems with the proposed tree structures can significantly shorten their concurrent data collection processes.

show abstract

Lithe: Lightweight Secure CoAP for the Internet of Things

Cited by 335 publications

References 14 publications

The Internet of Things: a security point of view

The Internet of Things: a security point of view

A Survey of Potential Security Issues in Existing Wireless Sensor Network Protocols

Concurrent Data Collection Trees for IoT Applications

Contact Info

Product

Resources

About