@inproceedings{WeberHinterbergerFischeretal., author = {Weber, Bernhard and Hinterberger, Lukas and Fischer, Sebastian and Hackenberg, Rudolf}, title = {How to Prevent Misuse of IoTAG?}, series = {Cloud Computing 2021: the Twelfth International Conference on Cloud Computing, GRIDs, and Virtualization: April 18-22, 2021, Porto, Portugal}, booktitle = {Cloud Computing 2021: the Twelfth International Conference on Cloud Computing, GRIDs, and Virtualization: April 18-22, 2021, Porto, Portugal}, editor = {Duncan, Bob and Lee, Yong Woo and Popescu, Manuela}, publisher = {IARIA}, address = {Wilmington, DE, USA}, isbn = {978-1-61208-845-7}, issn = {2308-4294}, abstract = {Since IoT devices are potentially insecure and offer great attack potential, in our past research we presented IoTAG, a solution where devices communicate security-related information about themselves. However, since this information can also be exploited by attackers, we present in this paper a solution against the misuse of IoTAG. In doing so, we address the two biggest problems: authentication and pairing with a trusted device. This is solved by introducing a pairing process, which uses the simultaneous authentication of equals algorithm to securely exchange and verify each others signature, and by using the server and client authentication provided by HTTP over TLS. We provide the minimum requirements and evaluate the methods used. The emphasis is on known and already proven methods. Additionally, we analyze the potential consequences of an attacker tapping the IoTAG information. Finally, we conclude that the solution successfully prevents access to IoTAG by unauthorized clients on the same network.}, language = {en} }