Sweet Dreams and Nightmares: Security in the Internet of Things

Kasper, Timo; Oswald, David; Paar, Christof

doi:10.1007/978-3-662-43826-8_1

Cited by 5 publications

(3 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…wireless sensor nodes). Such resource constraints pose a massive challenge for the implementation of measures to minimize sidechannel leakage, which makes IoT devices an easy target for attacks [22]. It is widely believed in the cryptographic community that side-channel attacks are primarily an implementation problem rather than a design problem, i.e.…”

Section: Introductionmentioning

confidence: 99%

Correlation Power Analysis of Lightweight Block Ciphers: From Theory to Practice

Biryukov

Dinu

Großschädl

2016

Applied Cryptography and Network Security

View full text Add to dashboard Cite

Abstract. Side-Channel Analysis (SCA) represents a serious threat to the security of millions of smart devices that form part of the so-called Internet of Things (IoT). Choosing the "right" cryptographic primitive for the IoT is a highly challenging task due to the resource constraints of IoT devices and the variety of primitives. An important criterion to assess the suitability of a lightweight cipher with respect to SCA is the amount of leakage available to an adversary. In this paper, we analyze the efficiency of different selection functions that are commonly used in Correlation Power Analysis (CPA) attacks on symmetric primitives. To this end, we attacked implementations of the lightweight block ciphers AES, Fantomas, LBlock, Piccolo, PRINCE, RC5, Simon, and Speck on an 8-bit AVR processor. By exploring the relation between the nonlinearity of the studied selection functions and the measured leakages, we discovered some imperfections when using nonlinearity to quantify the resilience against CPA. Then, we applied these findings in an evaluation of the "intrinsic" CPA-resistance of unprotected implementations of the eight mentioned ciphers. We show that certain implementation aspects can influence the leakage level and try to explain why. Our results shed new light on the resilience of basic operations executed by these ciphers against CPA and help to bridge the gap between theory and practice.

show abstract

Section: Introductionmentioning

confidence: 99%

Correlation Power Analysis of Lightweight Block Ciphers: From Theory to Practice

Biryukov

Dinu

Großschädl

2016

Applied Cryptography and Network Security

View full text Add to dashboard Cite

show abstract

“…When utilizing block ciphers on IoT devices, it is necessary to consider a side-channel attack. The side-channel attack exploits the information when the device is working, (e.g., electromagnetic wave or heat) [9]. There are several proposals for countermeasures [10][11][12][13][14].…”

Section: Introductionmentioning

confidence: 99%

Masked Implementation of Format Preserving Encryption on Low-End AVR Microcontrollers and High-End ARM Processors

et al. 2021

View full text Add to dashboard Cite

Format-Preserving Encryption (FPE) for Internet of Things (IoT) enables the data encryption while preserving the format and length of original data. With these advantages, FPE can be utilized in many IoT applications. However, FPE requires complicated computations and these are high overheads on IoT embedded devices. In this paper, we proposed an efficient implementation of Format-preserving Encryption Algorithm (FEA), which is the Korean standard of FPE, and the first-order masked implementation of FEA on both low-end (i.e., AVR microcontroller) and high-end (i.e., ARM processor) IoT devices. Firstly, we show the vulnerability of FEA when it comes to the Correlation Power Analysis (CPA) approach. Afterward, we propose an efficient implementation method and the masking technique for both low-end IoT device and high-end IoT device. The proposed method is secure against power analysis attacks but the performance degradation of masked measure is only 2.53∼3.77% than the naïve FEA implementation.

show abstract

“…Unfortunately, many connected devices are known for their limited memory space and computational capabilities. Then, conventional privacy solutions as encryption methods, and other security systems as firewall, are inadequate to solve the challenging privacy concerns [4]. One promising solution is the use of game theory to model the interactions of actors and decision challenges in privacy scenarios.…”

Section: Introductionmentioning

confidence: 99%

A Markov game privacy preserving model in retail applications

Sfar

Natalizio

Challal

et al. 2017

2017 International Conference on Selected Topics in Mobile and Wireless Networking (MoWNeT)

View full text Add to dashboard Cite

New retail applications induce integration of many components as NFC (Near Field Communication), M2M (Machine-to-Machine), IoT (Internet of Things), Web applications, etc. in large business sectors, such as payment services, products manufacturing, supply chain management, etc. Sensors, integrated in everyday products may facilitate threats as users tracking and profiling. An increasing concern about privacy threats posed by data affluence and device ubiquity takes place. This paper presents a privacy scheme for retail applications, discusses challenges related to customer profiling, client consent, device and information security. To protect customers' data, we propose a Markovian game, with detailed states, actions, strategies and transitions available for data holder to reach a compromise between privacy concessions and incentive motivation proposed by data requester. Numerical results are used to analyze and evaluate the game theory-based model.

show abstract

Sweet Dreams and Nightmares: Security in the Internet of Things

Cited by 5 publications

References 14 publications

Correlation Power Analysis of Lightweight Block Ciphers: From Theory to Practice

Correlation Power Analysis of Lightweight Block Ciphers: From Theory to Practice

Masked Implementation of Format Preserving Encryption on Low-End AVR Microcontrollers and High-End ARM Processors

A Markov game privacy preserving model in retail applications

Contact Info

Product

Resources

About