Securing the internet of things: A standardization perspective

IEEE Internet of Things Journal

Volumn 1, Issue 3, 2014, Pages 265-275

  Keoh, Sye Loong ^a   Kumar, Sandeep S ^b   Tschofenig, Hannes ^c  

^a UNIVERSITY OF GLASGOW   (United Kingdom)

^b PHILIPS RESEARCH LABORATORIES   (Netherlands)

^c ARM LTD   (United Kingdom)

Author keywords

Authentication; Cryptography; Internet; IP networks; Materials; Protocols

Indexed keywords

AUTHENTICATION; CHROMIUM COMPOUNDS; CRYPTOGRAPHY; INTERNET; INTERNET OF THINGS; MATERIALS; NETWORK PROTOCOLS; NETWORK SECURITY; STANDARDIZATION;

APPLICATION PROTOCOLS; CONSTRAINED APPLICATION PROTOCOL (COAP); INTELLIGENT SENSORS; INTERNET ENGINEERING TASK FORCES; INTERNET OF THING (IOT); IP NETWORKS; SECURITY PROTOCOLS; TRANSPORT LAYER SECURITY;

INTERNET PROTOCOLS;

EID: 84919978090     PISSN: None     EISSN: 23274662     Source Type: Journal    
DOI: 10.1109/JIOT.2014.2323395     Document Type: Article

References (51)

1. D. Eastlake, III, Transport layer security (TLS) extensions: Extension definitions. RFC 6066, Jan. 2011
2. Zigbee Alliance, Zigbee-IP specification. Mar. 2013
3. J. Arkko, E. Carrara, F. Lindholm, M. Naslund, and K. Norrman, MIKEY: Multimedia Internet KEYing. RFC 3830, Aug. 2004
4. O. Bergmann, TinyDTLS-A Basic DTLS Server Template, 2012
5. S. Blake-Wilson, N. Bolyard, V. Gupta, C. Hawk, and B. Moeller, Elliptic curve cryptography (ECC) cipher suites for transport layer Security (TLS). RFC 4492, May 2006
6. Cisco. (2014, Jan.). The Internet of Things [Online]. Available: http://share. cisco.com/internet-of-things.html
7. D. Cooper., et al., Internet X.509 public key infrastructure certificate and certificate revocation list (CRL) profile. RFC 5280, May 2008
8. T. Dierks and E. Rescorla, The transport layer security (TLS) protocol version 1.2. RFC 5246, Aug. 2008
9. Ericsson, More than 50 billion connected devices. Ericsson White Paper 284 23-3149 Uen, Feb. 2011
10. P. Eronen and H. Tschofenig, Pre-shared key ciphersuites for transport layer security (TLS). RFC 4279, Dec. 2005
11. R. Moskowitz., et al., Host identity protocol version 2 (HIPv2). Internetdraft, IETF, 2012
12. S. Farrell and H. Tschofenig, Pervasive monitoring is an attack. Draftfarrell-perpass-attack-06, IETF, 2013
13. O. Garcia-Morchon., et al., Securing the IP-based Internet of Things with HIP and DTLS. in Proc. 6th ACM Conf. Secur. Privacy Wirel. Mobile Netw. (WiSec), 2013, pp. 119-124
14. D. Hardt, The OAuth 2.0 authorization framework. RFC 6749, Oct. 2012
15. K. Hartke, Practical issues with datagram transport layer security in constrained environments. Draft-hartke-dice-practicalissues-00, IETF, 2012
16. K. Hartke and H. Tschofenig, A DTLS 1.2 profile for the Internet of Things. Draft-ietf-dice-profile-00, IETF, 2014
17. J. Hui and P. Thubert, Compression format for IPv6 datagrams over IEEE 802.15.4-based networks. RFC 6282 (Proposed Standard), Sep. 2011
18. IETF, Constrained RESTful environments (CORE) WG. 2013
19. IETF, DTLS in constrained environment (DICE) WG. 2013
20. IETF, Lightweight implementation guidance (LWIG) WG. 2013
21. IETF, Authentication and authorization for constrained environments (ace) mailing list. Apr. 2014
22. S. Kent and K. Seo, Security architecture for the internet protocol. RFC 4301, Dec. 2005, updated by RFC 6040
23. S. L. Keoh, S. S. Kumar, and O. Garcia-Morchon, Securing the IP-based Internet of Things with DTLS. Draft-keoh-lwig-dtls-iot-02, IETF, 2013
24. S. L. Keoh, S. S. Kumar, O. Garcia-Morchon, and E. Dijk, DTLS-based multicast security for low-power and lossy networks. Draft-keoh-dicemulticast-security-06, IETF, 2013
25. S. L. Keoh, S. S. Kumar, and Z. Shelby, Profiling of DTLSfor CoAP-based IoT applications. Draft-keoh-dtls-profile-iot-00, IETF, 2013
26. T.Kivinen,Minimal IKEv2. Internet-draft,draft-ietf-lwig-ikev2-minimal-01, IETF, 2013
27. S. S. Kumar, S. L. Keoh, and O. Garcia-Morchon, DTLS relay for constrained environments. Internet-draft, IETF, 2013
28. S. S. Kumar, S. L. Keoh, and H. Tschofenig, A hitchhikers guide to the (datagram) transport layer security protocol. Draft-ietf-lwig-tls-minimal-00, IETF, 2013
29. N. Kushalnagar, G. Montenegro, and C. Schumacher, IPv6 over low-power wireless personal area networks (6LoWPANs): Overview, assumptions, problem statement, and goals. RFC 4919, Aug. 2007
30. A. Liu and P. Ning, Tinyecc: A configurable library for elliptic curve cryptography in wireless sensor networks. in Proc. Int. Conf. Inf. Process. Sensor Netw. (IPSN?08), 2008, pp. 245-256
31. D. McGrew and D. Bailey, AES-CCM cipher suites for transport layer security (TLS). RFC 6655 (Proposed Standard), Jul. 2012
32. J. Merkle and M. Lochter, Elliptic curve cryptography (ECC) brainpool curves for transport layer security (TLS). RFC 7027, Oct. 2013
33. G. Montenegro, N. Kushalnagar, J. Hui, and D. Culler, Transmission of IPv6 packets over IEEE 802.15.4 networks. RFC 4944, Sep. 2007
34. R. Moskowitz, HIP diet eXchange (DEX). Draft-moskowitz-hip-rg-dex-06, IETF, 2012
35. J. Nieminen., et al., Transmission of IPv6 packets over Bluetooth low energy. Draft-ietf-6lowpan-btle-12, IETF, 2012
36. OMA, Wireless application protocol (WAP 2.0) architecture specification, 2001
37. OMA,Wireless transport layer security (WTLS),WAPForum Ltd., Tech. Rep. WAP-261-102-WTLS-20011027-a, 2001
38. A. Perrig, D. Song, R. Canetti, J. D. Tygar, and B. Briscoe, Timed efficient stream loss-tolerant authentication (TESLA). RFC 4082, Jun. 2005
39. P. PeterMariager, J. Petersen, and Z. Shelby, Transmission of IPv6 packets overDECTultra low energy. Draft-mariager-6lowpan-v6over-dect-ule-03, IETF, 2013
40. S. Raza., et al., Securing communication in 6lowpan with compressed ipsec. in Proc. Int. Conf. Distrib. Comput. Sensor Syst. Workshops (DCOSS), 2011, pp. 1-8
41. S. Raza, H. Shafagh, K. Hewage, R. Hummen, and T. Voigt, Lithe: Lightweight secure CoAP for the Internet of Things. IEEE Sensors J, vol. 13, no. 10, pp. 3711-3720, Oct. 2013
42. E. Rescorla and B. Korver, Guidelines for writing RFC text on security considerations. RFC 3552, Jul. 2003
43. E. Rescorla and N. Modadugu, Datagram transport layer security version 1.2. RFC 6347 (Proposed Standard), Jan. 2012
44. R. Riaz, K.-H. Kim, and H. F. Ahmed, Security analysis survey and framework design for IP connected LoWPANs. in Proc. Int. Symp. Auton. Decentralized Syst. (ISADS?09), 2009, pp. 1-6
45. R. Roman and J. Lopez, Integrating wireless sensor networks and the internet: A security analysis. Internet Res, vol. 19, no. 2, pp. 246-259, 2009
46. R. Roman, P. Najera, and J. Lopez, Securing the Internet of Things. IEEE Comput, vol. 44, no. 9, pp. 51-58, Sep. 2011
47. B. Schneier, The Internet of Things is wildly insecure and often unpatchable. Wired, Jan. 2014 [Online]. Available: http://www.wired.com/2014/01/theres-no-good-way-to-patch-the-internet-of-things-and-thats-a-hugeproblem/
48. Z. Shelby, S. Chakrabarti, E. Nordmark, and C. Bormann, Neighbor discovery optimization for IPv6 over low-power wireless personal area networks. RFC 6775, Nov. 2012
49. Z. Shelby, K. Hartke, and C. Bormann, Constrained application protocol (CoAP). Draft-ietf-core-coap-18, IETF, 2013
50. T. Winter., et al., RPL: IPv6 routing protocol for low-power and lossy networks. RFC 6550 (Proposed Standard), Mar. 2012
51. P. Wouters, H. Tschofenig, J. Gilmore, S. Weiler, and T. Kivinen, Using raw public keys in TLS and DTLS. Draft-ietf-tls-oob-pubkey-10, IETF, 2013