@article{Navas2020,

title = {IANVS: A Moving Target Defense Framework for a Resilient Internet of Things},

author = {Renzo E Navas and Hr{a}kon Sandaker and Fr\'{e}d\'{e}ric Cuppens and Nora Cuppens and Laurent Toutain and Georgios Z Papadopoulos},

doi = {10.1109/ISCC50000.2020.9219728},

issn = {15301346},

year  = {2020},

date = {2020-01-01},

journal = {Proceedings - IEEE Symposium on Computers and Communications},

volume = {2020-July},

abstract = {The Internet of Things (IoT) is more and more present in fundamental aspects of our societies and personal life. Billions of objects now have access to the Internet. This networking capability allows for new beneficial services and applications. However, it is also the entry-point for a wide variety of cyber-attacks that target these devices. The security measures present in real IoT systems lag behind those of the standard Internet. Security is sometimes completely absent. Moving Target Defense (MTD) is a 10-year-old cyber-defense paradigm. It proposes to randomize components of a system. Reasonably, an attacker will have a higher cost attacking an MTD-version of a system compared with a static-version of it. Even if MTD has been successfully applied to standard systems, its deployment for IoT is still lacking. In this paper, we propose a generic MTD framework suitable for IoT systems: IANVS (pronounced Janus). Our framework has a modular design. Its components can be adapted according to the specific constraints and requirements of a particular IoT system. We use it to instantiate two concrete MTD strategies. One that targets the UDP port numbers (port-hopping), and another a CoAP resource URI. We implement our proposal on real hardware using Pycom LoPy4 nodes. We expose the nodes to a remote Denial-of-Service attack and evaluate the effectiveness of the IANVS-based port-hopping MTD proposal.},

keywords = {attack, ChaCha20, CoAP, design, framework, hping3, IoT, LoPy4, Moving Target Defense, MTD, port-hopping, reconnaissance, Security, stream-cipher},

pubstate = {published},

tppubtype = {article}

}

@article{Pahl2019,

title = {Giving IoT services an identity and changeable attributes},

author = {Marc Oliver Pahl and Lorenzo Donini},

isbn = {9783903176157},

year  = {2019},

date = {2019-01-01},

journal = {2019 IFIP/IEEE Symposium on Integrated Network and Service Management, IM 2019},

number = {section II},

pages = {455--461},

abstract = {The Internet of Things (IoT) pervades our surroundings. It softwarizes our physical environments. Software controls devices that interface their physical environments. The IoT is often privacy, safety, and security critical. Consequently, it requires adequate mechanisms for securing its services. For reasons such as heterogeneity, complexity, and lack of deployment there is little research on IoT service security.Our work creates a base for IoT service security. We give IoT services secure identities and attributes. Using site-local X.509v3 certificates with short lifetimes, we show how service attributes can securely be changed at runtime. This enables enforcing security policies even on distributed, loosely coupled IoT nodes. Our central mechanisms are pinning certificates to service executables, and autonomously managing the short certificate lifetimes. We assess the resulting renewal traffic and power consumption. textcopyright 2019 IFIP.},

keywords = {Autonomous service management, Certificates, IoT, Metadata, Microservices, Security, Unattended nodes, X.509},

pubstate = {published},

tppubtype = {article}

}

@article{Navas2018,

title = {Demo: Do not trust your neighbors! a small iot platform illustrating a man-in-the-middle attack},

author = {Renzo E Navas and H\'{e}l\`{e}ne Le Bouder and Nora Cuppens and Fr\'{e}d\'{e}ric Cuppens and Georgios Z Papadopoulos},

doi = {10.1007/978-3-030-00247-3_11},

issn = {16113349},

year  = {2018},

date = {2018-01-01},

journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},

volume = {11104 LNCS},

pages = {120--125},

abstract = {This demonstration defines a small IoT wireless network that uses TI CC2538-OpenMote as hardware platform and state-of-the-art IETF network standards such as 6LoWPAN, RPL, and CoAP implemented by ContikiOS. The IoT nodes are controlled from outside the IoT network using end-to-end connectivity provided by IPv6-CoAP messages. We implement a man-in-the-middle attack that disrupts the normal behavior of the system. Our attack leverages on the inherent hierarchical routing topology of RPL-based IoT networks. The demonstration aims at highlighting the need for end-to-end source-authentication and authorization enforcement of information even inside a trusted IoT network. We also provide some insights on how these services can be offered in a IoT-friendly way.},

keywords = {CoAP, E2E security, IoT, IPv6, MITM attack, RPL},

pubstate = {published},

tppubtype = {article}

}

@article{Kome2018,

title = {CoAP Enhancement for a better IoT centric protocol: CoAP 2.0},

author = {Marco Lobe Kome and Frederic Cuppens and Nora Cuppens-Boulahia and Vincent Frey},

doi = {10.1109/IoTSMS.2018.8554494},

isbn = {9781538695852},

year  = {2018},

date = {2018-01-01},

journal = {2018 5th International Conference on Internet of Things: Systems, Management and Security, IoTSMS 2018},

pages = {139--146},

publisher = {IEEE},

abstract = {The need to connect things is skyrocketing and the Internet of Things is drawing a clear pattern of the need for smarter things. We are proposing an upgrade of Constrained Application Protocol (CoAP) built upon the 3 main networking needs of a connecting thing: The discovery, the synchronous and asynchronous communications and the publish/subscribe. CoAP 2.0 as we call it, will allow building smart things independently of the use-case, with a single protocol, fewer lines of codes and with less impact on the memory.},

keywords = {CoAP, Discovery, IoT, Publish/Subscribe, Security},

pubstate = {published},

tppubtype = {article}

}

@article{Pahl2018c,

title = {Securing IoT microservices with certificates},

author = {Marc Oliver Pahl and Lorenzo Donini},

doi = {10.1109/NOMS.2018.8406189},

isbn = {9781538634165},

year  = {2018},

date = {2018-01-01},

journal = {IEEE/IFIP Network Operations and Management Symposium: Cognitive Management in a Cyber World, NOMS 2018},

pages = {1--5},

abstract = {The Internet of Things (IoT) consists of distributed computing nodes. With increasing processor power such nodes can be used as hosts for microservices. IoT services routinely processes security critical data that affects the privacy, safety, and security of users. However, suitable security mechanisms remain missing. Fundamental open challenges are the authentication of services, securing the metadata of services, and validating the correct functioning of security mechanisms on distributed entities under different authorities. In this paper we present a certificate- based methodology for authenticating services, securely adding information to their executables, and validating the correct functioning of distributed entities of our design. We add X.509 certificates with extended attributes to the service executables. By introducing different trust anchors, services and their metadata are protected through their entire life cycle from developers to the computing nodes running them. Our solution enables distributed nodes to verify the security properties locally. It enables reliably changing certificate properties across the distributed IoT nodes. It features autonomous certificate management. We evaluate the traffic caused by our autonomous certificate management process quantitatively. The presented solution is churn tolerant and applicable to diverse distributed systems.},

keywords = {Autonomous certificate management, Certificates, IoT, Microservices, Security, Unattended nodes, X.509},

pubstate = {published},

tppubtype = {article}

}

@article{Pahl2018b,

title = {Graph-based IoT microservice security},

author = {Marc Oliver Pahl and Fran\c{c}ois Xavier Aubet and Stefan Liebald},

doi = {10.1109/NOMS.2018.8406118},

isbn = {9781538634165},

year  = {2018},

date = {2018-01-01},

journal = {IEEE/IFIP Network Operations and Management Symposium: Cognitive Management in a Cyber World, NOMS 2018},

pages = {1--3},

abstract = {The Internet of Things (IoT) can be considered as Service Oriented Architecture (SOA) of Microservices ($mu$S). The $mu$Ss inherently process data that affects the privacy, safety, and security of its users. IoT service security is a key challenge. Most state of the art providing IoT system security is policy based. We showcase a graph-based access control that runs as module on IoT nodes, or in the network. Our solution intercepts and firewalls inter-service communication. It automatically creates a model of legitimate communication relationships. The model is interactively updated via a simple-to-understand interface. Our solution adds inevitable IoT security to existing IoT systems .},

keywords = {Autonomous service management, firewall, IoT, Mi-croservices, Passive monitoring, Security, Unattended nodes},

pubstate = {published},

tppubtype = {article}

}

@article{Kome2017,

title = {DIscovery and registration protocol: For device and person identity management in IoT},

author = {Marco Lobe Kome and Mariem Graa and Nora Cuppens-Boulahia and Fr\'{e}d\'{e}ric Cuppens and Vincent Frey},

doi = {10.1007/978-3-319-72598-7_15},

issn = {16113349},

year  = {2017},

date = {2017-01-01},

journal = {Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)},

volume = {10717 LNCS},

pages = {243--262},

abstract = {With connected things, one service can be used with more than one device, all sharing the same user identity. In this context, the need to figure out whether the service is being used through a desktop computer, a smartphone, or a more constrained device is essential in order to better manage user identity. Given that constrained devices are less tamper resistant, they are more vulnerable to attacks than other appliances. We identified two challenges which make it difficult to apply robusts security mechanisms: the limited resources available on devices and the sharing of a user's identity with the device. To address these challenges, we propose, a DIscovery and REgistration (DIRE) protocol that ensures secure device and person identities management. Our protocol has been formally proven and implemented. The runtime of the whole protocol is short and the code the device must embed is lightweight. As a result of our experiment, we produced a command line client for a user, a device firmware and a server handling the filiation of a user and its devices.},

keywords = {Identity management, IoT, MQTT, OAuth, Security},

pubstate = {published},

tppubtype = {article}

}