S×C4IoT: A Security-by-contract Framework for Dynamic Evolving IoT Devices

Giaretta, Alberto; Dragoni, Nicola; Massacci, Fabio

doi:10.1145/3480462

Cited by 3 publications

(2 citation statements)

References 56 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…IoT security is a significant challenge as connected devices expand exponentially across many industries [126]. As a result, there is a need for a lightweight algorithm that balances cost, performance, and security.…”

Section: Discussionmentioning

confidence: 99%

A Review of Lightweight Security and Privacy for Resource-Constrained IoT Devices

Kumar,

Dangi

et al. 2024

CMC

View full text Add to dashboard Cite

The widespread and growing interest in the Internet of Things (IoT) may be attributed to its usefulness in many different fields. Physical settings are probed for data, which is then transferred via linked networks. There are several hurdles to overcome when putting IoT into practice, from managing server infrastructure to coordinating the use of tiny sensors. When it comes to deploying IoT, everyone agrees that security is the biggest issue. This is due to the fact that a large number of IoT devices exist in the physical world and that many of them have constrained resources such as electricity, memory, processing power, and square footage. This research intends to analyse resource-constrained IoT devices, including RFID tags, sensors, and smart cards, and the issues involved with protecting them in such restricted circumstances. Using lightweight cryptography, the information sent between these gadgets may be secured. In order to provide a holistic picture, this research evaluates and contrasts well-known algorithms based on their implementation cost, hardware/software efficiency, and attack resistance features. We also emphasised how essential lightweight encryption is for striking a good cost-to-performance-to-security ratio. KEYWORDSIoT; a sensor device; lightweight; cryptography; block cipher; smart card; security and privacy Intelligent Power Grids: The transfer of data and control instructions between smart metres, grid equipment, and the centralised grid management system in smart grid systems is encrypted using lightweight cryptography. These low-power cryptographic systems protect data authenticity and privacy with little re-source drain. Inventory Control:To ensure the safety of data sent between GPS-enabled tracking devices and the main monitoring platform, asset tracking systems utilise lightweight encryption. In this way, pre-cious assets may be tracked in real-time, and their whereabouts can be kept secret from prying eyes.Linked Automobiles: Communications between the many Internet of Things (IoT) components in a car, such as the infotainment system, telematics, and sensors, are encrypted using lightweight cryptography in connected vehicle systems. These lightweight cryptographic methods help keep vehicle data secure and private without slowing down response times.Intelligent Farming: Soil moisture sensors, drones, and controlled irrigation systems are only a few ex-amples of the Internet of Things devices that benefit from lightweight cryptography in precision agriculture. These gadgets provide information on the state of crops and their surrounding environments, while also saving electricity and protecting the privacy of crucial agricultural records.Environmental Monitoring: Lightweight cryptography is employed in Internet of Things sensors for environmental monitoring applications in uninhabited areas like woods and seas. Even in lowpower settings, these sensors may gather information about the weather, air quality, or animals, and send it on to a central monitoring system. Management of Retai...

show abstract

Section: Discussionmentioning

confidence: 99%

A Review of Lightweight Security and Privacy for Resource-Constrained IoT Devices

Kumar,

Dangi

et al. 2024

CMC

View full text Add to dashboard Cite

show abstract

“…They suggest that communication between the IVI system and the vehicle's controller area network (CAN) be kept to a minimum to prevent malware from crossing over. In [24], authors proposed the C4IoT framework that combines elements of security contracts and fog computing to handle security issues in IoT devices. The authors claim that IoT devices demand a detailed behavioral analysis in order to adopt a secure default configuration and models of self-configuration.…”

Section: Related Workmentioning

confidence: 99%

Do Charging Stations Benefit from Cryptojacking? A Novel Framework for Its Financial Impact Analysis on Electric Vehicles

Malik

Anwar

2022

Energies

View full text Add to dashboard Cite

Electric vehicles (EVs) are becoming popular due to their efficiency, eco-friendliness, and the increasing cost of fossil fuel. EVs support a variety of apps because they house powerful processors and allow for increased connectivity. This makes them an attractive target of stealthy cryptomining malware. Recent incidents demonstrate that both the EV and its communication model are vulnerable to cryptojacking attacks. The goal of this research is to explore the extent to which cryptojacking impacts EVs in terms of recharging and cost. We assert that while cryptojacking provides a financial advantage to attackers, it can severely degrade efficiency and cause battery loss. In this paper we present a simulation model for connected EVs, the cryptomining software, and the road infrastructure. A novel framework is proposed that incorporates these models and allows an objective quantification of the extent of this economic damage and the advantage to the attacker. Our results indicate that batteries of infected cars drain more quickly than those of normal cars, forcing them to return more frequently to the charging station for a recharge. When just 10% of EVs are infected we observed 70.6% more refueling requests. Moreover, if the hacker infects a charging station then he can make a USD 436.4 profit per day from just 32 infected EVs. Overall, our results demonstrate that cryptojackers injected into EVs indirectly provide a financial advantage to the charging stations at the cost of an increased energy strain on society.

show abstract

Systematic Review of Fuzzing in IoT: Evaluating Techniques, Vulnerabilities, and Research Gaps

Touqir,

Iradat,

Rakib

et al. 2024

Preprint

View full text Add to dashboard Cite

As our dependence on the internet and digital platforms grows, the risk of cyber threats rises, making it essential to implement effective Measures to safeguard sensitive information through cybersecurity, ensure system integrity, and prevent unauthorized data access. Fuzz testing, commonly known as fuzzing, is a valuable for software testing as it uncovers vulnerabilities and defects in systems by introducing random data inputs, often leading to system crashes. In the Internet of Things domain, fuzzing is crucial for identifying vulnerabilities in networks, devices, and applications through automated tools that systematically inject malformed inputs into IoT systems. This research aims to comprehensively evaluate current fuzzing practices, emphasizing adaptive techniques tailored to IoT environments. A rigorous analysis of 30 recent academic articles was conducted to identify weaknesses, gaps, and challenges in existing approaches. The investigation revealed the need for novel fuzzing techniques that address firmware, hardware, and software vulnerabilities, as well as Denial of Service attacks in IoT systems. By exploring recent trends and identifying gaps and challenges, this research aims to advance IoT security, highlighting the need for improved fuzzing techniques and presenting future research directions to strengthen IoT cybersecurity.

show abstract

S×C4IoT: A Security-by-contract Framework for Dynamic Evolving IoT Devices

Cited by 3 publications

References 56 publications

A Review of Lightweight Security and Privacy for Resource-Constrained IoT Devices

A Review of Lightweight Security and Privacy for Resource-Constrained IoT Devices

Do Charging Stations Benefit from Cryptojacking? A Novel Framework for Its Financial Impact Analysis on Electric Vehicles

Systematic Review of Fuzzing in IoT: Evaluating Techniques, Vulnerabilities, and Research Gaps

Contact Info

Product

Resources

About