TY - JOUR A1 - Hinterberger, Lukas A1 - Fischer, Sebastian A1 - Weber, Bernhard A1 - Neubauer, Katrin A1 - Hackenberg, Rudolf T1 - Extended Definition of the Proposed Open Standard for IoT Device IdentificAtion and RecoGnition (IoTAG) JF - International Journal on Advances in Internet Technology N2 - Internet of Things (IoT) devices are critical to operate and maintain, because of their number and high connectivity. A lot of security issues concern IoT devices and the networks they are integrated. To help getting an overview of an IoT network, the devices and the security, we propose a scoring system to get a good impression of IT security. This system generates single scores for each device, using features like encryption, update behavior, etc. Furthermore, a summarized score for the whole network is calculated, to show the status of the network security in an easy way for the administrator. To enable the scoring system, a precise list of the existing devices and their operating status is necessary. To achieve this, we present an open standard for the IoT Device IdentificAtion and RecoGnition (short IoTAG), which requires that devices report, e.g., their name, an unique ID, the firmware version and the supported encryption. The proposed standard is described in detail and an implementation guideline is given in this paper. Additionally, information about how to realize the serialization, the integrity and the communication with IoTAG. KW - Internet of Things KW - device identification KW - open standard KW - security rating KW - IoTAG Y1 - 2020 UR - https://www.thinkmind.org/articles/inttech_v13_n34_2020_2.pdf VL - 13 IS - 3 & 4 SP - 110 EP - 121 PB - IARIA ER - TY - CHAP A1 - Hinterberger, Lukas A1 - Weber, Bernhard A1 - Fischer, Sebastian A1 - Neubauer, Katrin A1 - Hackenberg, Rudolf T1 - IoT Device IdentificAtion and RecoGnition (IoTAG) T2 - CLOUD COMPUTING 2020, The Eleventh International Conference on Cloud Computing, GRIDs and Virtualization N2 - To ensure the secure operation of IoT devices in the future, they must be continuously monitored. This starts with an inventory of the devices, checking for a current software version and extends to the encryption algorithms and active services used. Based on this information, a security analysis and rating of the whole network is possible. To solve this challenge in the growing network environments, we present a proposal for a standard. With the IoT Device IdentificAtion and RecoGnition (IoTAG), each IoT device reports its current status to a central location as required and provides information on security. This information includes a unique ID, the exact device name, the current software version, active services, cryptographic methods used, etc. The information is signed to make misuse more difficult and to ensure that the device can always be uniquely identified. In this paper, we introduce IoTAG in detail and describe the necessary requirements. KW - Internet of Things KW - device identification KW - IoTAG KW - security rating Y1 - 2020 UR - https://thinkmind.org/articles/cloud_computing_2020_2_10_28002.pdf SN - 978-1-61208-778-8 SP - 17 EP - 23 PB - IARIA ER - TY - CHAP A1 - Weber, Bernhard A1 - Hinterberger, Lukas A1 - Fischer, Sebastian A1 - Hackenberg, Rudolf ED - Duncan, Bob ED - Lee, Yong Woo ED - Popescu, Manuela T1 - How to Prevent Misuse of IoTAG? T2 - Cloud Computing 2021: the Twelfth International Conference on Cloud Computing, GRIDs, and Virtualization: April 18-22, 2021, Porto, Portugal N2 - Since IoT devices are potentially insecure and offer great attack potential, in our past research we presented IoTAG, a solution where devices communicate security-related information about themselves. However, since this information can also be exploited by attackers, we present in this paper a solution against the misuse of IoTAG. In doing so, we address the two biggest problems: authentication and pairing with a trusted device. This is solved by introducing a pairing process, which uses the simultaneous authentication of equals algorithm to securely exchange and verify each others signature, and by using the server and client authentication provided by HTTP over TLS. We provide the minimum requirements and evaluate the methods used. The emphasis is on known and already proven methods. Additionally, we analyze the potential consequences of an attacker tapping the IoTAG information. Finally, we conclude that the solution successfully prevents access to IoTAG by unauthorized clients on the same network. KW - Internet of Things KW - IoTAG KW - device pairing KW - device authentication KW - trusted connection Y1 - 2021 UR - https://www.thinkmind.org/articles/cloud_computing_2021_1_40_28006.pdf SN - 978-1-61208-845-7 SN - 2308-4294 PB - IARIA CY - Wilmington, DE, USA ER -