Aman

Seminar Presentation
Department
of
Electronics and Communication
Research Topic
IoT: Internet of Threats? A Survey of Practical

Security Vulnerabilities in Real IoT Devices
Student Name :
Research Guide :
Aman Kumar Roy
Prof. Rajesh Saha
2020UEC1629
Contents :-
Intoduction
Security Challenges
Security Mechanism
Security of IoT
Conclusion
Introduction -
Rapid growing network .
Very convenient and beneficial but many security vulnerabilities.
Many of these services require users to intentionally reveal personal data for
advanced and more personalized services.
Hacking and Exploitation.
Serious security breaches and financial losses.

Security Challenges
Attacks are simple and easy
Collected data can be any thing
# Security Requirements
There are three levels where security is required:-
1.Information Level
2. Access Level
3.Functional Level
Information Level
At this level, security should guarentee the following requirements:
1) Integrity: The received data should not be altered during transmission.
2) Anonymity: The identity of the data source should remain hidden from third parties.
3) Confidentiality: Data cannot be read by third parties.
4) Privacy: The user’s private information should not be disclosed during the data exchange.
Access Level
It specifies some security mechanisms to control the access of the network:
1) Access Control: Only legitimate users have access
2) Authentication: Does device has the right to access a network and vice
- versa
3) Authorization: Only authorized devices and users get access

Functional Level
This level defines the security requirements in terms of the following criteria.
1) Resilience: Network's capacity to ensure security, even in case of attacks and failures.
2) Self Organization: Capability to adjust to remain operational even in failure or malicious
attacks.
Security Mechanism
Standard security mechanisms designed to overcome the above problems are:
Encryption
Light Weight Cryptography
Random Number Generators
Secure Hardware
Intrusion detection System
Ecnryption
Confidentiality during communication.
Convert actual message to different one.
Reverted only with a secret key.
Standard Encryption Mechanism

Can be performed in two ways:
1. Bit-by-Bit
2. Block cipher
Most used in advanced encryption standard (AES) (or Rijndael).

Published in 2001 by the National Institute of Standards and Technology (NIST).
AES is Cascade of N successive series of three elementary cipher

Series of three Elementary cipher
The three Blocks are:
Substitution(S) Cipher
Transportation(T) Cipher
Linear(L) Cipher
Depending on the length of the key, the number of blocks as well as the name is determined.
Lightweight Cryptography
Low-complexity IoT devices.
Resource and energy-constrained devices.
Required to design specific security algorithms.
Standard lightweight cryptography mechanism - PRESENT and CLEIFA.
Random Number Generator
Randomness - the base of encryption.
Cryptographically secure when probability lesser than 1/2.
Commonly used for cryptographic applications:

1) The true random number generator (TRNG) -
Exploits physical noise
2) The pseudo-random number generator (PRNG) -

Expands short key into a long random bits
Deterministic Algo
Real application and technology
Secure Hardware
Secure hardware is also required.
Physically unclonable functions (PUFs) can be adopted.

PUF exploits little differences introduced by the fabrication process to generate
unique signature for each device.
Intrusion Detection System
Should detect ongoing attacks.

Complex anti-virus software and traffic analyzer can't be used(constrained).
Security of Common IoT Communication Technologies
Popular transmission technologies :
1. ZigBee
2. BLE
3. 6LoWPAN
4. LoRaWAN.
Among these technologies, ZigBee, BLE, and 6LoWPAN are predominantly

used for short-range communications in homes or small offices.
LoRaWAN instead is used for long-range scenarios, such as city-wide

monitoring and control applications.
A. ZigBee
Two way wireless communication
Low cost and power consumption
Each network includes a Trust Center
Star or Tree topology
Attack Surface
Discovering key
B. Bluetooth Low Energy(BLE)
Widely used short range service
Master and Slave Concept

Star Topology
Attack Surface
Pairing
Conclusion
Benefits, but serious security risks also.

Role of manufacturers and users.
Resources
www.google.com
www.canva.com
ieeexplore.ieee.org
en.wikipedia.org/wiki/Internet_of_things

Aman

Uploaded by

Copyright:

Available Formats

Aman

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Aman

Uploaded by

Copyright:

Available Formats

Seminar Presentation

IoT: Internet of Threats? A Survey of Practical

Very convenient and beneficial but many security vulnerabilities.

Hacking and Exploitation.

Serious security breaches and financial losses.

Collected data can be any thing

1) Integrity: The received data should not be altered during transmission.

3) Confidentiality: Data cannot be read by third parties.

1) Access Control: Only legitimate users have access

3) Authorization: Only authorized devices and users get access

2) Self Organization: Capability to adjust to remain operational even in failure or malicious

Standard Encryption Mechanism

Most used in advanced encryption standard (AES) (or Rijndael).

AES is Cascade of N successive series of three elementary cipher

The three Blocks are:

Commonly used for cryptographic applications:

2) The pseudo-random number generator (PRNG) -

Physically unclonable functions (PUFs) can be adopted.

Should detect ongoing attacks.

Among these technologies, ZigBee, BLE, and 6LoWPAN are predominantly

LoRaWAN instead is used for long-range scenarios, such as city-wide

Master and Slave Concept

Benefits, but serious security risks also.

You might also like