Digitalisierung
Refine
Document Type
Language
- English (3)
Has Fulltext
- no (3)
Is part of the Bibliography
- no (3)
Keywords
- IoTAG (3) (remove)
Institute
- Fakultät Informatik und Mathematik (3) (remove)
Begutachtungsstatus
- peer-reviewed (2)
Internet of Things (IoT) devices are critical to operate and maintain, because of their number and high connectivity.
A lot of security issues concern IoT devices and the networks they
are integrated. To help getting an overview of an IoT network,
the devices and the security, we propose a scoring system to get
a good impression of IT security. This system generates single
scores for each device, using features like encryption, update
behavior, etc. Furthermore, a summarized score for the whole
network is calculated, to show the status of the network security
in an easy way for the administrator. To enable the scoring
system, a precise list of the existing devices and their operating
status is necessary. To achieve this, we present an open standard
for the IoT Device IdentificAtion and RecoGnition (short IoTAG),
which requires that devices report, e.g., their name, an unique ID,
the firmware version and the supported encryption. The proposed
standard is described in detail and an implementation guideline
is given in this paper. Additionally, information about how to
realize the serialization, the integrity and the communication
with IoTAG.
Since IoT devices are potentially insecure and offer great attack potential, in our past research we presented IoTAG, a solution where devices communicate security-related information about themselves. However, since this information can also be exploited by attackers, we present in this paper a solution against the misuse of IoTAG. In doing so, we address the two biggest problems: authentication and pairing with a trusted device. This is solved by introducing a pairing process, which uses the simultaneous authentication of equals algorithm to securely exchange and verify each others signature, and by using the server and client authentication provided by HTTP over TLS. We provide the minimum requirements and evaluate the methods used. The emphasis is on known and already proven methods. Additionally, we analyze the potential consequences of an attacker tapping the IoTAG information. Finally, we conclude that the solution successfully prevents access to IoTAG by unauthorized clients on the same network.
To ensure the secure operation of IoT devices in the
future, they must be continuously monitored. This starts with
an inventory of the devices, checking for a current software
version and extends to the encryption algorithms and active
services used. Based on this information, a security analysis and
rating of the whole network is possible. To solve this challenge
in the growing network environments, we present a proposal for
a standard. With the IoT Device IdentificAtion and RecoGnition
(IoTAG), each IoT device reports its current status to a central
location as required and provides information on security. This
information includes a unique ID, the exact device name, the
current software version, active services, cryptographic methods
used, etc. The information is signed to make misuse more difficult
and to ensure that the device can always be uniquely identified.
In this paper, we introduce IoTAG in detail and describe the
necessary requirements.