Digitalisierung
Refine
Year of publication
- 2020 (2)
Document Type
Language
- English (2)
Has Fulltext
- no (2)
Is part of the Bibliography
- no (2)
Keywords
- security rating (2) (remove)
Institute
- Fakultät Informatik und Mathematik (2) (remove)
Begutachtungsstatus
- peer-reviewed (1)
Internet of Things (IoT) devices are critical to operate and maintain, because of their number and high connectivity.
A lot of security issues concern IoT devices and the networks they
are integrated. To help getting an overview of an IoT network,
the devices and the security, we propose a scoring system to get
a good impression of IT security. This system generates single
scores for each device, using features like encryption, update
behavior, etc. Furthermore, a summarized score for the whole
network is calculated, to show the status of the network security
in an easy way for the administrator. To enable the scoring
system, a precise list of the existing devices and their operating
status is necessary. To achieve this, we present an open standard
for the IoT Device IdentificAtion and RecoGnition (short IoTAG),
which requires that devices report, e.g., their name, an unique ID,
the firmware version and the supported encryption. The proposed
standard is described in detail and an implementation guideline
is given in this paper. Additionally, information about how to
realize the serialization, the integrity and the communication
with IoTAG.
To ensure the secure operation of IoT devices in the
future, they must be continuously monitored. This starts with
an inventory of the devices, checking for a current software
version and extends to the encryption algorithms and active
services used. Based on this information, a security analysis and
rating of the whole network is possible. To solve this challenge
in the growing network environments, we present a proposal for
a standard. With the IoT Device IdentificAtion and RecoGnition
(IoTAG), each IoT device reports its current status to a central
location as required and provides information on security. This
information includes a unique ID, the exact device name, the
current software version, active services, cryptographic methods
used, etc. The information is signed to make misuse more difficult
and to ensure that the device can always be uniquely identified.
In this paper, we introduce IoTAG in detail and describe the
necessary requirements.