Privacy and Security in Internet of Things and Wearable Devices

IEEE Transactions on Multi-Scale Computing Systems

Volumn 1, Issue 2, 2015, Pages 99-109

  Arias, Orlando ^a   Wurm, Jacob ^a   Hoang, Khoa ^a   Jin, Yier ^a  

^a University of Central Florida   (United States)

Author keywords

Hardware security; Internet of Things (IoT); user privacy; wearable devices

Indexed keywords

HARDWARE SECURITY; INTERNET; NETWORK SECURITY; WEARABLE TECHNOLOGY;

EMBEDDED DEVICE; INDUSTRY PRACTICES; INTERNET OF THINGS (IOT); PRIVACY AND SECURITY; SECURITY AND PRIVACY; SECURITY MECHANISM; USER PRIVACY; WEARABLE DEVICES;

INTERNET OF THINGS;

EID: 84961752361     PISSN: None     EISSN: 23327766     Source Type: Journal    
DOI: 10.1109/TMSCS.2015.2498605     Document Type: Article

References (51)

1. D. Evans
2. P. Middleton, P. Kjeldsen, and J. Tully, "Forecast: The internet of things, worldwide, 2013," Gartner, 2013.
3. D. Welch and S. Lathrop, "Wireless security threat taxonomy," in Proc. IEEE Syst., Man Cybern. Soc. Inf. Assurance Workshop, 2003, pp. 76-83.
4. R. Roman, P. Najera, and J. Lopez, "Securing the internet of things," Computer, vol. 44, no. 9, pp. 51-58, Sep. 2011.
5. R. Roman, J. Zhou, and J. Lopez, "On the features and challenges of security and privacy in distributed internet of things," Comput. Netw., vol. 57, no. 10, pp. 2266-2279, 2013.
6. A. Williams. (2011). How the internet of things helps us understand radiation levels [Online]. http://readwrite.com/2011/04/ 01/ow-the-internet-of-things-help.
7. D. Viehland and F. Zhao, "The future of personal area networks in a ubiquitous computing world," Int. J. Adv. Pervasive Ubiquitous Comput., vol. 2, no. 2, pp. 30-44, 2010.
8. H. Schaffers, N. Komninos, M. Pallot, B. Trousse, M. Nilsson, and A. Oliveira, "Smart cities and the future internet: Towards cooperation frameworks for open innovation," in The Future Internet, Berlin, Germany: Springer, 2011, pp. 431-446.
9. P. N. Mahalle, B. Anggorojati, N. R. Prasad, and R. Prasad, "Identify authentication and capability based access control (IACAC) for the internet of things," J. Cyber Security Mobility, vol. 1, pp. 309-348, 2013.
10. Y. Challal, "Internet of things security: Towards a cognitive and systemic approach," Ph.D. dissertation, Compiegne University of Technology, 2012.
11. A. Riahi, Y. Challal, E. Natalizio, Z. Chtourou, and A. Bouabdallah, "A systemic approach for IoT security," in Proc. IEEE Int. Conf. Distrib. Comput. Sensor Syst., 2013, pp. 351-355.
12. A. Riahi, E. Natalizio, Y. Challal, N. Mitton, and A. Iera, "A systemic and cognitive approach for IoT security," in Proc. Int. Conf. Comput., Netw. Commun., 2014, pp. 183-188.
13. (2015). Nest Labs. Privacy statement [Online]. https://nest.com/ legal/privacy-statement/
14. J. H. Ziegeldorf, O. G. Morchon, and K. Wehrle, "Privacy in the internet of things: Threats and challenges," Security Commun. Netw., vol. 7, no. 12, pp. 2728-2742, 2014.
15. A. D. Thierer, "The internet of things and wearable technology: Addressing privacy and security concerns without derailing innovation," Rich. J. Law Technol., vol. 21, pp. 6-15, 2015.
16. L. Atzori, A. Iera, and G. Morabito, "The internet of things: A survey," Comput. Netw., vol. 54, no. 15, pp. 2787-2805, 2010.
17. S. Babar, P. Mahalle, A. Stango, N. Prasad, and R. Prasad, "Proposed security model and threat taxonomy for the internet of things (IoT)," in Proc. Recent Trends Netw. Security Appl.: 3rd Int. Conf., 2010, pp. 420-429.
18. P. Kocher, J. Jaffe, and B. Jun, "Differential power analysis," in Proc. Adv. Cryptol., 1999, pp. 789-789.
19. G. Mulligan, "The 6LowPAN architecture," in Proc. 4th Workshop Embedded Netw. Sensors, 2007, pp. 78-82.
20. Z. Shelby, K. Hartke, C. Bormann, and B. Frank, "Constrained application protocol (CoAP), draft-ietf-core-coap-13," in The Internet Engineering Task Force (IETF), 2012.
21. E. Rescorla and N. Modadugu, "Datagram transport layer security," RFC 4347, 2006.
22. S. Kent and K. Seo, "Security architecture for the internet protocol," RFC 4301, 2005.
23. M. Brachmann, S. L. Keoh, O. Morchon, and S. Kumar, "End-toend transport security in the ip-based internet of things," in Proc. 21st Int. Conf. Comput. Commun. Netw., 2012, pp. 1-5.
24. R. Seggelmann, "Sctp: Strategies to secure end-to-end communication," Ph.D. dissertation, Univ. Duisburg-Essen, Essen, Germany, 2012.
25. ARM, "Building a secure system using trustzone technology," ARM Limited, Cambridge, England, 2009.
26. F. McKeen, I. Alexandrovich, A. Berenzon, C. Rozas, H. Shafi, V. Shanbhogue, and U. Savagaonkar, "Innovative instruction and software model for isolated execution," in Proc. 2nd Int. Workshop Hardware Architectural Support Security Privacy, 2013.
27. I. Anati, S. Gueron, S. P. Johnson, and V. R. Scarlata, "Innovative technology for cpu based attestation and sealing," in Proc. 2nd Int. Workshop Hardware Architectural Support Security Privacy, 2013.
28. Samsung. (2015). Samsung KNOX: Mobile Enterprise Security [Online]. Available: https://www.samsungknox.com/en
29. N. Keltner and C. Holmes, "Here be dragons: A bedtime tale for sleepless nights," in RedCon, 2014.
30. D. Rosenberg, "Reflections on trusting trustzone," in BlackHat USA, 2014.
31. T. Wei and Y. Zhang, "To swipe or not to swipe: A challenge for your fingers," in Proc. RSA Conf., 2015.
32. "Freertos reference manual: API functions and configuration options," Real Time Eng. Limited, Tech. Rep. WC2H 9JQ, London, England, 2009.
33. A. Barbalace, A. Luchetta, G. Manduchi, M. Moro, A. Soppelsa, and C. Taliercio, "Performance comparison of VxWorks, Linux, RTAI and Xenomai in a hard real-time application," in Proc. 15th IEEE-NPSS Real-Time Conf., 2007, pp. 1-5.
34. (1982-2014). QNX operating systems [Online]. Available: http:// www.qnx.com/products/neutrino-rtos/index.html
35. CVE-2014-0160. Common Vulnerabilities and Exposures [Online]. Available: https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2014-0160
36. CVE-2014-2783. Common Vulnerabilities and Exposures [Online]. Available: http://www.cve.mitre.org/cgi-bin/cvename.cgi? name=CVE-2014-2783
37. CVE-2014-2001. Common Vulnerabilities and Exposures [Online]. Available: http://web.nvd.nist.gov/view/vuln/detail?vulnId= CVE-2014-2001
38. CVE-2013-7373. Common Vulnerabilities and Exposures [Online]. Available: http://web.nvd.nist.gov/view/vuln/detail?vulnId= CVE-2013-7373
39. CVE-2013-6951. Common Vulnerabilities and Exposures [Online]. Available: http://web.nvd.nist.gov/view/vuln/detail?vulnId= CVE-2013-6951
40. CVE-2013-6950. Common Vulnerabilities and Exposures [Online]. Available: http://web.nvd.nist.gov/view/vuln/detail?vulnId= CVE-2013-6950
41. G. Becker, F. Regazzoni, C. Paar, and W. P. Burleson, "Stealthy dopant-level hardware trojans," in Proc. 15th Int. Conf. Cryptographic Hardware Embedded Syst., 2013, pp. 197-214.
42. (2015). Nest Labs. Open source compliance [Online]. https://nest. com/legal/compliance
43. Texas Instruments, "AM3715, AM3703 Sitara ARM Microprocessor," 2011.
44. D. Halperin, T. Heydt-Benjamin, B. Ransford, S. Clark, B. Defend, W. Morgan, K. Fu, T. Kohno, and W. Maisel, "Pacemakers and implantable cardiac defibrillators: Software radio attacks and zero-power defenses," in Proc. IEEE Symp. Security Privacy, 2008, pp. 129-142.
45. ST Microelectronics, "STM32L15xQC, STM32L15xRC-A, STM32L 15xVC-A, STM32L15xZC Ultra-low-power 32b MCU ARM-based Cortex-M3, 256KB Flash 32KB SRAM, 8KB EEPROM, LCD, USB, ADC, DAC," no. 026119 Rev 5, 2015.
46. M. BARBARO and T. Zeller Jr., "A face is exposed for aol searcher no. 4417749," The New York Times, 2006.
47. I. Reynolds and C. Fujioka. (2011). Update 2-sony removes data posted by hackers, delays playstation restart. Reuters [Online]. http://www.reuters.com/article/2011/05/07/sonyidUSL3E7G701T20110507
48. Z.Whittaker. (2012).Amazon's zappos inmassivedata breach 24million affected. ZDNet [Online]. http://www.zdnet.com/article/ amazons-zappos-in-massive-data-breach-24-million-affected/
49. M. Mombrea. (2014). Googles real plan behind the purchase of the nest thermostat [Online]. http://www.itworld.com/consumerization-it/416110/googles-plan-rake-cash-nest-thermostat
50. W. Arbaugh, D. Farber, and J. Smith, "A secure and reliable bootstrap architecture," in Proc. IEEE Symp. Security Privacy, 1997, pp. 65-71.
51. Texas Instruments, "MSP430 Programming Via the JTAG Interface," 2015.