Securing smart maintenance services: Hardware-security and TLS for MQTT

Proceeding - 2015 IEEE International Conference on Industrial Informatics, INDIN 2015

Volumn , Issue , 2015, Pages 1243-1250

  Lesjak, Christian ^a   Hein, Daniel ^b   Hofmann, Michael ^c   Maritsch, Martin ^d   Aldrian, Andreas ^e   Priller, Peter ^e   Ebner, Thomas ^d   Ruprechter, Thomas ^a   Pregartner, Günther ^c  

^a INFINEON TECHNOLOGIES AUSTRIA AG   (Austria)

^b GRAZ UNIVERSITY OF TECHNOLOGY   (Austria)

^c GUEP Software GmbH   (Austria)

^d Evolaris Next Level GmbH   (Austria)

^e AVL LIST GMBH   (Austria)

Author keywords

Authentication; Cryptography; Internet; Maintenance engineering; Production; Protocols

Indexed keywords

AUTHENTICATION; CRYPTOGRAPHY; HARDWARE; INFORMATION SCIENCE; INTERNET; INTERNET PROTOCOLS; MAINTAINABILITY; MAINTENANCE; NETWORK PROTOCOLS; PRODUCTION; REPAIR;

CLIENT AUTHENTICATION; EUROPEAN RESEARCH PROJECT; MAINTENANCE , REPAIR AND OPERATIONS; MANUFACTURING PROCESS; PROTOTYPE IMPLEMENTATIONS; SECURITY AND PRIVACY ISSUES; SYSTEM ARCHITECTURES; TRANSPORT LAYER SECURITY;

HARDWARE SECURITY;

EID: 84949521136     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INDIN.2015.7281913     Document Type: Conference Paper

References (20)

1. H. Kagermann, J. Helbig, A. Hellinger, and W. Wahlster, "Recommendations for implementing the strategic initiative INDUSTRIE 4. 0. Final report. " 2013.
2. H. Aschbacher, "Framework fuer das agile Entwickeln von IKTbasierten Dienstleistungen unter Nutzung von Smart Services, " Ph. D. dissertation, Graz University of Technology, 2014.
3. P. Priller, A. Aldrian, and T. Ebner, "Case study: From legacy to connectivity-migrating industrial devices into the world of smart services, " in IEEE ETFA, 2014.
4. J. Delsing. ARROWHEAD framework. [Online]. Accessed 2015/2/17. [Online]. Available: http://www. arrowhead. eu/about/arrowhead-common-technology/arrowhead-framework/
5. C. Lesjak, T. Ruprechter, J. Haid, H. Bock, and E. Brenner, "A secure hardware module and system concept for local and remote industrial embedded system identification, " in IEEE ETFA, 2014.
6. C. Lesjak, T. Ruprechter, H. Bock, J. Haid, and E. Brenner, "Estado-enabling smart services for industrial equipment through a secured, transparent and ad-hoc data transmission online, " in ICITST, 2014.
7. M. Krotofil and D. Gollmann, "Industrial control systems security: What is happening?" in IEEE INDIN, 2013.
8. J. Matherly. (2009) Shodan computer search engine. [Accessed 2015/02/20]. [Online]. Available: https://www. shodan. io/
9. D. Gollmann, "From insider threats to business processes that are secure-by-design, " in INCoS, 2011.
10. A. Banks and R. Gupta, "MQTT version 3. 1. 1, " OASIS, OASIS Standard, 2014.
11. T. Dierks and E. Rescorla, The Transport Layer Security (TLS) Protocol Version 1. 2, Internet Engineering Task Force Std., August 2008. [Online]. Available: http://tools. ietf. org/html/rfc5246
12. M. Georgiev, S. Iyengar, S. Jana, R. Anubhai, D. Boneh, and V. Shmatikov, "The most dangerous code in the world: validating SSL certificates in non-browser software, " in ACM CCS, 2012.
13. S. Fahl, M. Harbach, T. Muders, M. Smith, L. Baumgärtner, and B. Freisleben, "Why eve and mallory love Android: An analysis of android SSL (in)security, " in ACM CCS, 2012.
14. M. Egele, D. Brumley, Y. Fratantonio, and C. Kruegel, "An empirical study of cryptographic misuse in Android applications, " in ACM SIGSAC, 2013.
15. K. Kim and P. R. Kumar, "Cyber-physical systems: A perspective at the centennial, " Proceedings of the IEEE, vol. 100, no. Centennial-Issue, 2012.
16. P. Urien and S. Elrharbi, "Tandem smart cards: enforcing trust for TLSbased network services, " in IEEE ASWN, 2008.
17. R. D. Brown, SEC 2: Recommended Elliptic Curve Domain Parameters, Certicom Research Std., January 2010.
18. NIST, "Recommendation for key management, special publication 800-57 part 1 rev. 3, " NIST, Tech. Rep., July 2012.
19. N. J. AlFardan and K. G. Paterson, "Lucky thirteen: Breaking the TLS and DTLS record protocols, " in IEEE Symposium on Security and Privacy, SP, 2013.
20. D. A. McGrew and J. Viega, "The security and performance of the galois/counter mode (GCM) of operation, " in INDOCRYPT, 2004.