TY - GEN A1 - Hiller, Jens A1 - Pennekamp, Jan A1 - Dahlmanns, Markus A1 - Henze, Martin A1 - Panchenko, Andriy A1 - Wehrle, Klaus T1 - Tailoring Onion Routing to the Internet of Things: Security and Privacy in Untrusted Environments T2 - Proceedings of the 27th annual IEEE International Conference on Network Protocols (IEEE ICNP 2019), Chicago, Illinois, USA, October 2019 N2 - An increasing number of IoT scenarios involve mobile, resource-constrained IoT devices that rely on untrusted networks for Internet connectivity. In such environments, attackers can derive sensitive private information of IoT device owners, e.g., daily routines or secret supply chain procedures, when sniffing on IoT communication and linking IoT devices and owner. Furthermore, untrusted networks do not provide IoT devices with any protection against attacks from the Internet. Anonymous communication using onion routing provides a well-proven mechanism to keep the relationship between communication partners secret and (optionally) protect against network attacks. However, the application of onion routing is challenged by protocol incompatibilities and demanding cryptographic processing on constrained IoT devices, rendering its use infeasible. To close this gap, we tailor onion routing to the IoT by bridging protocol incompatibilities and offloading expensive cryptographic processing to a router or web server of the IoT device owner. Thus, we realize resource-conserving access control and end-toend security for IoT devices. To prove applicability, we deploy onion routing for the IoT within the well-established Tor network enabling IoT devices to leverage its resources to achieve the same grade of anonymity as readily available to traditional devices. KW - Routing, Internet of Things, Protocols, Cryptography, Servers Y1 - 2019 UR - https://ieeexplore.ieee.org/document/8888033 SN - 978-1-7281-2700-2 SN - 978-1-7281-2701-9 U6 - https://doi.org/10.1109/ICNP.2019.8888033 SN - 2643-3303 SN - 1092-1648 PB - IEEE Press ER -