Efficient Blockchain-based IoT Firmware Update Considering Distribution Incentives

The Internet of Things (IoT) devices is able to communicate with another IoT devices in heterogeneous environments. They are also able to create a network by their own using wireless capabilities without a centralized approach. This network is called wireless mobile ad hoc network (MANET). The MANET facilitate IoT devices to communicate with each other in an infrastructure less network of the Internet of Things environment. The IoT devices can dynamically join, create connection and exchange information among them. The role of cloud in this framework is to store and process the data by IoT devices. The communication Security has been raised as one of the most critical issues of cloud computing where resolving such an issue would result in a constant growth in the use and popularity of cloud. Our purpose of this study is to create a framework for providing the communication in an integrated framework of Cloud and MANET among IoT devices. Our main contribution links a new study that integrates cloud computing to the MANET and provides communication to the internet of things. This study can be used in the framework of the Internet of Things in future.

Seeing is not always believing: Insights on IoT manufacturing from firmware composition analysis and vendor survey

With the advancement in science and technology, the demand for electronic Internet of Things (IoT) devices has increased to store and process digital data. With the advancement in IoT technology, we are more reliant on IoT devices to perform our regular tasks. IoT Forensics deals with the investigation of IoT devices such as smartphones, tablets, smart watches, or any device which is connected to the Internet. The data on these devices can still be retrieved via IoT forensics even if they are destroyed, resold, or misplaced. Before discarding any IoT device, we must consider how to secure the data stored on them. We are then going to discuss the several types of personal data that could be retrieved from discarded IoT devices. Finally, we are going to discuss the protection measures for the safe disposal of IoT devices.

Internet of things is one of the latest technology in today’s era, IoT devices are increasing day by day and become a part of our life. Sometimes we even didn’t know that we are using and surrounded by such technolgy. Smart devices like smart phone, tablets and any wearables are the example of IoT technology. These all are IoT devices and there are many more. As we all are in 2020 and facing the pandemic we all are become more connected with IoT devices to be safe. In this way the number of IoT devices per person will increase so much rapidly and several new innovations either of hardware or software take place. But the Internet of Things (IoT) devices are becoming more popular, the security measures are not upto the mark, and several issues will come in knowledge at different time on different devices. So we have to think about the security and privacy of user and should make it correct. We should learn from the past issues and try to fix them accordingly. To overcome the issues of IoT devices we can have to ways, one is to use ECC which will enchance the security in IoT device and another possible solution can be Blockchain. In this paper we will discuss about ECC and blockchain technology both and try to find a comparitive study.

As the usage growth rate of Internet of Things (IoT) devices is increasing, various issues related to these devices need attention. One of them is the distribution of the IoT firmware update. The IoT devices’ software development does not end when the manufacturer sells the devices to the market. It still needs to be kept updated to prevent cyber-attacks. The commonly used firmware update process, over-the-air (OTA), mostly happens in a centralized way, in which the IoT devices directly download the firmware update from the manufacturer’s server. This central architecture makes the manufacturer’s server vulnerable to single-point-of-failure and latency issues that can delay critical patches from being applied to vulnerable devices. The Open Connectivity Foundation (OCF) is one organization contributing to providing interoperability services for IoT devices. In one of their subject areas, they provide a firmware update protocol for IoT devices. However, their firmware update process does not ensure the integrity and security of the patches. In this paper, we propose a blockchain-based OCF firmware update for IoT devices. Specifically, we introduce two types of firmware update protocol, direct and peer-to-peer updates, integrated into OCF firmware update specifications. In the direct scenario, the device, through the IoT gateway, can download the new firmware update from the manufacturer’s server. Meanwhile, in the peer-to-peer scheme, the device can query the update from the nearby gateways. We implemented our protocol using Raspberry Pi hardware and Ethereum-based blockchain with the smart contracts to record metadata of the manufacturer’s firmware updates. We evaluated the proposed system’s performance by measuring the average throughput, the latency, and the firmware update distribution’s duration. The analysis results indicate that our proposal can deliver firmware updates in a reasonable duration, with the peer-to-peer version having a faster completion time than the direct one.

Extensive internet of things (IoT) devices being in-fected by malware are an increasingly important viable objective in IoT cyberattacks e.g., botnet, virus, trojan, etc. The botnets got leverage from unsecured IoT devices (e.g., CCTV, Raspberry Pi, Arduino Uno, ESP8266, etc) that operates by using the Internet traffic. In recent year, the high-profile IoT device’s vendor and the researcher from all over universities are exploring the robustness of IoT devices against botnet attacks. This research uses a deep learning approach to prevent botnet attacks on IoT networks. The deep residual one-dimensional CNN (1DCNN) model as the proposed method is used for botnet traffic detection. Two algorithms are provided: data processing for the N-BaIoT dataset and IoT botnet detection training and testing. For data processing, training, and testing, the datasets were evaluated, and the model was optimized with different optimizers. This research used RMS Prop, ADaDelta, AdaGrad, AdaMax, and Adam as optimizers and the CNN was compared with LSTM, CNN with RNN, and Deep residual 1DCNN, respectively. The results showed that Deep Residual 1DCNN with Adam has the highest training accuracy of 88.67%, 88.67% for validation accuracy, and 88.53%for test accuracy.

With the growth of wireless network technology-based devices, identifying the communication behaviour of wireless connectivity enabled devices, e.g. Internet of Things (IoT) devices, is one of the vital aspects, in managing and securing IoT networks. Initially, devices use frames to connect to the access point on the local area network and then, use packets of typical communication protocols through the access point to communicate over the Internet. Toward this goal, network packet and IEEE 802.11 media access control (MAC) frame analysis may assist in managing IoT networks efficiently, and allow investigation of inclusive behaviour of IoT devices. This paper presents network traffic traces data of D-Link IoT devices from packet and frame levels. Data collection experiment has been conducted in the Network Systems and Signal Processing (NSSP) laboratory at Universiti Brunei Darussalam (UBD). All the required devices, such as IoT devices, workstation, smartphone, laptop, USB Ethernet adapter, and USB WiFi adapter, have been configured accordingly, to capture and store network traffic traces of the 14 IoT devices in the laboratory. These IoT devices were from the same manufacture (D-Link) with different types, such as camera, home-hub, door-window sensor, and smart-plug.

In the modern security-conscious world, Deep Packet Inspection (DPI) proxies are increasingly often used on industrial and enterprise networks to perform TLS unwrapping on all outbound connections. However, enabling TLS unwrapping requires local devices to have the DPI proxy Certificate Authority certificates installed. While for conventional computing devices this is addressed via enterprise management, it's a difficult problem for Internet of Things (IoT) devices which are generally not under enterprise management, and may not even be capable of it due to their resource-constrained nature. Thus, for typical IoT devices, being installed on a network with DPI requires either manual device configuration or custom DPI proxy configuration, both of which solutions have significant shortcomings. This poses a serious challenge to the deployment of IoT devices on DPI-enabled intranets. The authors propose a solution to this problem: a method of installing on IoT devices the CA certificates for DPI proxy CAs, as well as other security configuration (security bootstrapping). The proposed solution respects the DPI policies, while allowing the commissioning of IoT and IIoT devices without the need for additional manual configuration either at device scope or at network scope. This is accomplished by performing the bootstrap operation over unsecured connection, and downloading certificates using TLS validation at application level. The resulting solution is light-weight and secure, yet does not require validation of the DPI proxy's CA certificates in order to perform the security bootstrapping, thus avoiding the chicken-and-egg problem inherent in using TLS on DPI-enabled intranets.

Research Article| March 01, 2016 The Internet of Geophysical Things: Raspberry Pi Enhanced REF TEK (RaPiER) System Integration and Evaluation Frank Sepulveda; Frank Sepulveda aDepartment of Geology, Baylor University, One Bear Place #97354, Waco, Texas 76798 U.S.A.frank_sepulveda@baylor.edu Search for other works by this author on: GSW Google Scholar Jay Pulliam Jay Pulliam aDepartment of Geology, Baylor University, One Bear Place #97354, Waco, Texas 76798 U.S.A.frank_sepulveda@baylor.edu Search for other works by this author on: GSW Google Scholar Author and Article Information Frank Sepulveda aDepartment of Geology, Baylor University, One Bear Place #97354, Waco, Texas 76798 U.S.A.frank_sepulveda@baylor.edu Jay Pulliam aDepartment of Geology, Baylor University, One Bear Place #97354, Waco, Texas 76798 U.S.A.frank_sepulveda@baylor.edu Publisher: Seismological Society of America First Online: 14 Jul 2017 Online Issn: 1938-2057 Print Issn: 0895-0695 © 2016 by the Seismological Society of America Seismological Research Letters (2016) 87 (2A): 345–357. https://doi.org/10.1785/0220150234 Article history First Online: 14 Jul 2017 Cite View This Citation Add to Citation Manager Share Icon Share Facebook Twitter LinkedIn MailTo Tools Icon Tools Get Permissions Search Site Citation Frank Sepulveda, Jay Pulliam; The Internet of Geophysical Things: Raspberry Pi Enhanced REF TEK (RaPiER) System Integration and Evaluation. Seismological Research Letters 2016;; 87 (2A): 345–357. doi: https://doi.org/10.1785/0220150234 Download citation file: Ris (Zotero) Refmanager EasyBib Bookends Mendeley Papers EndNote RefWorks BibTex toolbar search Search Dropdown Menu toolbar search search input Search input auto suggest filter your search All ContentBy SocietySeismological Research Letters Search Advanced Search ABSTRACT The proliferation of commercial Internet of Things (IoT) devices is raising consumers’ awareness of the benefits of enhancing everyday objects with the ability to communicate, sense, and process information. Commercial‐off‐the‐shelf (COTS) versions of the embedded technologies responsible for the rise of the IoT are easy‐to‐use, inexpensive, and relatively powerful. IoT Makers, technological do‐it‐yourself enthusiasts, utilize these technologies and the IoT ecosystem to create IoT devices that range from casual hobbyist to entrepreneurial in nature.In an effort to develop a “no‐engineer‐needed” Internet of Geophysical Things (IoGT) device, we integrated a COTS embedded computer with a geoscience‐related COTS data acquisition system (DAS). Using skills common to geoscientists, we integrated the Raspberry Pi System‐On‐Chip with the REF TEK (a Trimble brand) 130‐01 DAS. This Raspberry Pi enhanced REF TEK (RaPiER) provides IoGT Makers a platform for the development of geoscientific sensor node or network enhancements. IoGT Makers can use the RaPiER to tinker with IoT capabilities while simultaneously acquiring research‐quality data. Geoscientific (i.e., seismic) application areas that may benefit from RaPiER, particularly RaPiER nodal processing, include earthquake and engineering seismology.In this article, we discuss the emerging technologies that allow IoGT Makers to build their own IoGT device. We review our selection of the Raspberry Pi and REF TEK 130‐01 for IoGT device integration. We provide a RaPiER system integration guide and REF TEK interface software compiled for the Raspberry Pi ( available in the electronic supplement to this article). We present methods to expand RaPiER capabilities using the Raspberry Pi’s ecosystem. Last, we discuss our evaluation of RaPiER’s performance and its suitability for realistic field deployments. You do not have access to this content, please speak to your institutional administrator if you feel you should have access.

The deployment of a client–server-based distributed intelligent system involves application development in both the network domain and the device domain. In the network domain, an application server (typically in the cloud) is deployed to execute the network applications. In the device domain, several Internet of Things (IoT) devices may be configured as, for example, wireless sensor networks (WSNs), and interact with each other through the application server. Developing the network and the device applications are tedious tasks that are the major costs for building a distributed intelligent system. To resolve this issue, a low-code or no-code (LCNC) approach has been purposed to automate code generation. As traditional LCNC solutions are highly generic, they tend to generate excess code and instructions, which will lack efficiency in terms of storage and processing. Fortunately, optimization of automated code generation can be achieved for IoT by taking advantage of the IoT characteristics. An IoT-based distributed intelligent system consists of the device domain (IoT devices) and the network domain (IoT server). The software of an IoT device in the device domain consists of the Device Application (DA) and the Sensor Application (SA). Most IoT LCNC approaches provide code generation in the network domain. Very few approaches automatically generate the DA code. To our knowledge, no approach supports the SA code generation. In this paper, we propose DeviceTalk, an LCNC environment for the DA and the SA code development. DeviceTalk automatically generates the code for IoT devices to speed up the software development in the device domain for a distributed intelligent system. We propose the DeviceTalk architecture, design and implementation of the code generation mechanism for the IoT devices. Then, we show how a developer can use the DeviceTalk Graphical User Interface (GUI) to exercise LCNC development of the device software.

This dissertation proposes a solution to the growing concern about the security of Internet of Things (IoT) devices in home or business environments. Entitled MAIOS (Multi Accountability IoT Oriented Switch), the system offers an SDN (Software Defined Networking) switch architecture, which provides effective segmentation for IoT devices, increasing their protection against cyber threats. The research begins by contextualizing the exponential increase in IoT devices and the security challenges associated with them. MAIOS addresses this issue through a centralized control layer, which allows efficient management of IoT devices and the implementation of dynamic security policies, which can be applied from an SDN control plane application layer. The system was designed considering functional, non-functional requirements and deployment scenarios, either in home or business environments. To increase usability, an intuitive interface was developed for users, facilitating the configuration and monitoring of IoT devices. The solution is based on open source technologies such as pfSense proxy/firewall and Home Assistant to provide functionalities such as firewall, IoT control and real-time traffic monitoring. The effectiveness of MAIOS is evaluated through security and performance tests in simulated environments, which demonstrated its ability to identify and mitigate cyber threats, providing robust security for IoT devices. This dissertation offers a contribution to the field of IoT security, presenting a practical, affordable and effective solution to protect devices in residential and business networks. MAIOS represents an important advance in ensuring digital security in an increasingly connected world.

The development and use of Internet of Things (IoT) devices have grown significantly in recent years. Advanced IoT device characteristics are mainly to blame for the wide range of applications that may now be achieved with IoT devices. Corporations have begun to embrace the IoT concept. Identifying true and suitable devices, security faults that might be used for bad reasons, and administration of such devices are only a few of the issues that IoT, a new concept in technological progress, provides. In some ways, IoT device traffic differs from regular device traffic. Devices with particular features can be classified into categories, irrespective of their function or performance. Ever-changing and complex environments, like a smart home, demand this classification scheme. A total of 41 IoT devices were employed in this investigation. To build a multiclass classification model, IoT devices contributed 13 network traffic parameters. To further preprocess the raw data received, preprocessing techniques like Normalization and Dataset Scaling were utilized. Feature engineering techniques can extract features from the text data. A total of 117,423 feature vectors are contained in the dataset after stratification, which are used to further improve the classification model. In this study, a variety of performance indicators were employed to show the performance of the logiboosted algorithms. Logi-XGB scored 80.2% accuracy following application of the logit-boosted algorithms to the dataset for classification, whereas Logi-GBC achieved 77.8% accuracy. Meanwhile, Logi-ABC attained 80.7% accuracy. Logi-CBC, on the other hand, received the highest Accuracy score of 85.6%. The accuracy of Logi-LGBM and Logi-HGBC was the same at 81.37% each. Our suggested Logi-CBC showed the highest accuracy on the dataset when compared to existing Logit-Boosted Algorithms used in earlier studies.

Backscatter communication is an energy-efficient communication technique for the Internet of things (IoT) devices. It enables data transmission by reflecting the incident radio signals. In this paper, we propose a communication mode selection scheme for IoT devices that can communicate using either active transmission or backscattering. In the active transmission mode, the IoT devices can transmit data over narrowband subcarriers using power-domain non-orthogonal multiple access (NOMA). In the backscattering mode, which operates over shorter distance than active transmission, nearby user equipment (UE) devices are used as relays. The UEs receive the backscattered signals from the IoT devices and forward them to the base station. We formulate a connection density maximization problem to select the communication mode used by each IoT device. We determine the IoT device pairing for active transmission mode with NOMA and UE-IoT device association for backscattering mode. The formulated problem is a binary integer programming problem. Although it can be solved optimally, the optimal algorithm incurs exponential computational complexity. Hence, we propose a low-complexity suboptimal algorithm to solve this problem. Results show that our proposed algorithm can enhance the connection density of narrowband IoT systems by up to 64% when compared with using single communication mode.

The Internet of Things (IoT) has had a considerable influence on our daily lives by enabling enhanced connection of devices, systems, and services that extends beyond machine-to-machine interactions and encompasses a wide range of protocols, domains, and applications. However, despite privacy concerns shown by IoT users, little has been done to reduce and protect individual information exposure. It is extremely difficult to mitigate IoT devices from reidentification threats which is why it is still a major challenge for IoT users to securely protect their information. The trust controls how we regulate privacy in our IoT platforms in the same way that it governs personal relationships. As IoT devices become increasingly linked, more data is shared across individuals, businesses, governments, and ecosystems. Technologies, sensors, machines, data, and cloud connections all rely largely on trust relationships that have been formed. With the rapid growth of additional types of IoT devices that are being introduced, it, therefore, expands privacy concerns and is difficult to develop trust with an IoT system or device without the option to regulate information privacy settings. Privacy has always been a barrier for many devices as they race for the early adoption of IoT technologies. Several Internet of Things devices or systems will continue to pose privacy threats. As a result, the main objective of this study was to examine the individual understanding of privacy and to promote information privacy protection awareness not only to IoT users but also to organizations that use IoT devices or platforms to run their day-to-day business operations. Furthermore, the objective extends to compare user knowledge and concerns about IoT privacy, as well as to identify any common attitudes and variances. However, in terms of enhancing individuals’ knowledge, an artifact was developed to educate and enhance information privacy awareness among IoT users. A pre- and postquestionnaire was generated to test and validate user knowledge regarding information privacy protection in IoT. The study was conducted using a quantitative research method. Findings indicate that IoT users’ awareness of information privacy protection turned out to be average, suggesting a need for education and awareness. Several participants stated that information privacy protection awareness is required within the community to educate, raise awareness, eliminate human error, and enable individuals to be conscious of their privacy when surfing the Internet.

Internet of Things (IoT) is an emerging technology that consists of tiny sensors embedded with IoT devices used in e-Health, smart cities and assisted living. IoT devices are equipped with constrained power, memory, and computing capabilities, which creates new security challenges. By integrating sensors and wireless technologies, this cutting-edge technology automates numerous routine tasks in different domains. The main goal of advancing IoT in the existing healthcare system is to automate the monitoring of hospitals and patients’ health by spreading goodwill toward the IoT vision. IoT has gained popularity on practically all platforms that are available. This paper presents a remote patient health monitoring and diagnosis system that uses Message Queuing Telemetry Transport protocol (MQTT) and Internet of Things (IoT) devices with one time pad cryptography. The proposed plan offers end-to-end data secrecy for an IoT system using MQTT that enables e-health and mobility. Patients’ movements inside nursing homes and healthcare facilities are also managed safely without the need for periodic reconfigurations. Prior to communicating through the MQTT protocol, this secure crypto scheme encrypts the message on both the publisher and subscriber ends. According to the results, the proposed scheme is more efficient than delegation-based architecture in terms of security and lightweight communication. The proposed system established communication between patients and medical experts using IoT technologies to alleviate the hospital strain caused by congestion in medical treatment and enable an expressway of medical responses. According to our results the proposed scheme has low computational overhead compared to other solutions that use conventional encryption to guarantee robust protection against most of the IoT security attacks.