Quantitative Analysis of DoS Attacks and Client Puzzles in IoT Systems

Arnaboldi, Luca; Morisset, Charles

doi:10.1007/978-3-319-68063-7_16

Cited by 7 publications

(9 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The process of manual collection is also limited, not all attack scripts are available online and even though there are some excellent resources (e.g. expoitDB 4 and mitre 5 ), manually curating a list of of scripts is time consuming, complex and often bespoke to only one scenario. To alleviate this issue ready made tools are available, these tools, referred to as penetration testing tools, are able to scan for vulnerabilities and launch various pre-set attacks on systems with much less need for expert configuration.…”

Section: Methods To Evaluate Intrusion Detection Systems For Iotmentioning

confidence: 99%

“…This increased vulnerability is due in part to the low computational power and battery power characteristic of IoT devices. This has lead to a raise in popularity of battery drain denial of service attacks [4,5], these attacks target a device to perform power drain intensive operation to drain the battery. If they are successful it requires human intervention to change the battery something that is to be avoided in large unsupervised systems.…”

Section: Host Intrusion Detection For Iotmentioning

confidence: 99%

“…Available at : http://freecode.com/projects/httpbench4 Available at : https://www.exploit-db.com/5 Available at : http://cve.mitre.org/6 Available at : https://kali.org7 Available at : https://metasploit.com8 Available at : http://kdd.ics.uci.edu/databases/…”

mentioning

confidence: 99%

See 2 more Smart Citations

A Review of Intrusion Detection Systems and Their Evaluation in the IoT

Arnaboldi,

Morisset

2021

Preprint

Self Cite

View full text Add to dashboard Cite

Intrusion Detection Systems (IDS) are key components for securing critical infrastructures, capable of detecting malicious activities on networks or hosts. The procedure of implementing a IDS for Internet of Things (IoT) networks is not without challenges due to the variability of these systems and specifically the difficulty in accessing data. The specifics of these very constrained devices render the design of an IDS capable of dealing with the varied attacks a very challenging problem and a very active research subject. In the current state of literature, a number of approaches have been proposed to improve the efficiency of intrusion detection, catering to some of these limitations, such as resource constraints and mobility. In this article, we review works on IDS specifically for these kinds of devices from 2008 to 2018, collecting a total of 51 different IDS papers. We summarise the current themes of the field, summarise the techniques employed to train and deploy the IDSs and provide a qualitative evaluations of these approaches. While these works provide valuable insights and solutions for sub-parts of these constraints, we discuss the limitations of these solutions as a whole, in particular what kinds of attacks these approaches struggle to detect and the setup limitations that are unique to this kind of system.We find that although several paper claim novelty of their approach little inter paper comparisons have been made, that there is a dire need for sharing of datasets and almost no shared code repositories, consequently raising the need for a thorough comparative evaluation.

show abstract

Section: Methods To Evaluate Intrusion Detection Systems For Iotmentioning

confidence: 99%

Section: Host Intrusion Detection For Iotmentioning

confidence: 99%

See 1 more Smart Citation

A Review of Intrusion Detection Systems and Their Evaluation in the IoT

Arnaboldi,

Morisset

2021

Preprint

Self Cite

View full text Add to dashboard Cite

show abstract

“…The aforementioned vulnerabilities may be exploited by any malicious host in the Internet, in order to realize various types of (passive or active) cybercriminals targeting connected IoT‐integrated WSNs. Nevertheless, it is worthy to note that DoS attacks are the most dangerous threats targeting the networked smart things in the IoE 18,19 . This is simply justified by the fact that services provided by IoT devices are often critical, for example, e‐health, smart home, etc.…”

Section: Security Issues Associated With the Iotmentioning

confidence: 99%

Securing human‐to‐thing interactions in the Internet of Things with asymmetric and selective mechanism

Sahraoui

Bilami

2018

Security and Privacy

View full text Add to dashboard Cite

Ensuring security for communications, services, devices, and end‐users has been and continues to be a major concern in today's Internet. Recently, with the growing research advances toward the realization of the Internet of Things (IoT), security concerns are expected to rise substantially. This is due to the fact that a sheer number of tiny wireless and smart devices, handling personal and contextual data, will be connected permanently to the Internet. The connected things are henceforth able to interact autonomously with each other and with their users. This paper focuses on Human‐to‐Thing (H2T) interactions that are necessary in many important IoT applications, namely E‐healthcare, connected home, smart cities, and so on. Such a communication style is characterized by many technological and material heterogeneities, which exposes the connected (and already constrained) things to Denial of Service (DoS) threats and makes security more challenging. This paper addresses the security issue with H2T communications and presents an asymmetric‐selective mechanism to guarantee effective protection of such communication style while ensuring good resilience against DoS attacks. The assessment results show the efficiency of our proposal.

show abstract

“…Historically, 1 Order of authors is alphabetical. 2 Email: l.arnaboldi@newcastle.ac.uk 3 Email: ricardo.melo-czekster@newcastle.ac.uk 4 Email: roberto.metere@newcastle.ac.uk 5 Email: charles.morisset@newcastle.ac.uk power generation and demand have been very separated; however, this scenario is changing, and consequently their related security risks and possible attacks are changing too, so the current mitigation strategies may not be applicable any more. The current role of a load controller is balancing energy supply accordingly to demand while maintaining the frequency of the current at around 50 MHz in Europe (or 60 MHz for other countries such as USA, Brazil and Japan).…”

Section: Introductionmentioning

confidence: 99%

Modelling Load-Changing Attacks in Cyber-Physical Systems

Arnaboldi¹,

Czekster²,

Metere³

et al. 2019

Preprint

Self Cite

View full text Add to dashboard Cite

Cyber-Physical Systems (CPS) are present in many settings addressing a myriad of purposes. Examples are Internet-of-Things (IoT) or sensing software embedded in appliances or even specialised meters that measure and respond to electricity demands in smart grids. Due to their pervasive nature, they are usually chosen as recipients for larger scope cyber-security attacks. Those promote system-wide disruptions and are directed towards one key aspect such as confidentiality, integrity, availability or a combination of those characteristics. Our paper focuses on a particular and distressing attack where coordinated malware infected IoT units are maliciously employed to synchronously turn on or off high-wattage appliances, affecting the grid's primary control management. Our model could be extended to larger (smart) grids, Active Buildings as well as similar infrastructures. Our approach models Coordinated Load-Changing Attacks (CLCA) also referred as GridLock or BlackIoT, against a theoretical power grid, containing various types of power plants. It employs Continuous-Time Markov Chains where elements such as Power Plants and Botnets are modelled under normal or attack situations to evaluate the effect of CLCA in power reliant infrastructures. We showcase our modelling approach in the scenario of a power supplier (e.g. power plant) being targeted by a botnet. We demonstrate how our modelling approach can quantify the impact of a botnet attack and be abstracted for any CPS system involving power load management in a smart grid. Our results show that by prioritising the type of power-plants, the impact of the attack may change: in particular, we find the most impacting attack times and show how different strategies impact their success. We also find the best power generator to use depending on the current demand and strength of attack.

show abstract

Quantitative Analysis of DoS Attacks and Client Puzzles in IoT Systems

Cited by 7 publications

References 10 publications

A Review of Intrusion Detection Systems and Their Evaluation in the IoT

A Review of Intrusion Detection Systems and Their Evaluation in the IoT

Securing human‐to‐thing interactions in the Internet of Things with asymmetric and selective mechanism

Modelling Load-Changing Attacks in Cyber-Physical Systems

Contact Info

Product

Resources

About