• search hit 8 of 15
Back to Result List

How to Prevent Misuse of IoTAG?

  • Since IoT devices are potentially insecure and offer great attack potential, in our past research we presented IoTAG, a solution where devices communicate security-related information about themselves. However, since this information can also be exploited by attackers, we present in this paper a solution against the misuse of IoTAG. In doing so, we address the two biggest problems: authentication and pairing with a trusted device. This is solved by introducing a pairing process, which uses the simultaneous authentication of equals algorithm to securely exchange and verify each others signature, and by using the server and client authentication provided by HTTP over TLS. We provide the minimum requirements and evaluate the methods used. The emphasis is on known and already proven methods. Additionally, we analyze the potential consequences of an attacker tapping the IoTAG information. Finally, we conclude that the solution successfully prevents access to IoTAG by unauthorized clients on the same network.

Export metadata

Additional Services

Share in Twitter Search Google Scholar Statistics
Metadaten
Author:Bernhard Weber, Lukas Hinterberger, Sebastian Fischer, Rudolf Hackenberg
URL / DOI:https://www.thinkmind.org/articles/cloud_computing_2021_1_40_28006.pdf
ISBN:978-1-61208-845-7
ISSN:2308-4294
Parent Title (English):Cloud Computing 2021: the Twelfth International Conference on Cloud Computing, GRIDs, and Virtualization: April 18-22, 2021, Porto, Portugal
Publisher:IARIA
Place of publication:Wilmington, DE, USA
Editor:Bob Duncan, Yong Woo Lee, Manuela Popescu
Document Type:conference proceeding (article)
Language:English
Year of first Publication:2021
Release Date:2022/01/27
Tag:Internet of Things
IoTAG; device authentication; device pairing; trusted connection
Institutes:Fakultät Informatik und Mathematik
Fakultät Informatik und Mathematik / Labor Informationssicherheit und Complience (ISC)
Begutachtungsstatus:peer-reviewed
research focus:Digitalisierung
Licence (German):Keine Lizenz - Es gilt das deutsche Urheberrecht: § 53 UrhG