Efficient Parallel Implementation of CTR Mode of ARX-Based Block Ciphers on ARMv8 Microcontrollers

As location-aware IoT (Internet of Things) devices intend to spread across almost every application, IoT devices are going to require different GNSS (Global Navigation Satellite System) receiver design requirements. To deliver on IoT opportunities, system architects and designers need to look carefully at every aspect of system design and architecture to be able to enable the full potential of the IoT era. IoT devices are equipped with different connectivity sensors that can provide a reliable integrated location-awareness solution. IoT devices are mainly relying on GNSS chip to deliver a service when no other RF signal is available. Hence, GNSS chip is expected to maintain a robust and reliable performance even in harsh environment. The harsh environment includes multipath environment, NLOS (Non-Line of Sight) GNSS signal reception, weak GNSS signal power reception, superimposed motion (e.g., arm swing, floating platform fluctuation …etc.), operation under freezing temperature, and interference. The targeted low-cost system design along with the expected harsh operational environment derived us to face exceptional GNSS signal reception condition. This paper discusses lessons learned, and challenges faced signal acquisition, reacquisition, and tracking for several IoT applications. Different operational modes are also explored to accommodate various use cases scenarios for several IoT applications. These different power consumption operational modes allow the GNSS chip to achieve an Ultra-low power consumption which indeed required for IoT applications. This paper provides an overview about the addressed GNSS chip fabricated in a 28nm FD-SOI process. We demonstrate a system performance and power consumption comparison of this chip along with other state-of-the-art GNSS chip. We compare the positioning performance for this device alongside another state-of-the-art GNSS modules and Novatel’s tightly coupled GNSS/INS (Inertial Navigation System) reference solution at numerous scenarios ranging from walking, running, and driving at several sites under different environment.

At the current pace of technological advancement, it is evident that IoT (Internet of Things) devices are becoming an inevitable part of daily life. Since the growth rate is exceptional, this situation has led to an alarming rise in concern for security threats and issues in the IoT devices. The purpose of this study is to introduce a novel and well-structured threat-modeling approach which is specifically tailored for IoT devices. Traditional threat models like STRIDE, LINDDUN, CORAS, etc., are effective in software applications. However, these models do not cover every aspect of threats specific to IoT devices. The proposed approach consists of a seven-step threat-modeling process. This methodology also addresses aspects of IoT devices which directly affect the user: Privacy threats; Safety threats; and Malfunction threats (PSM). The mentioned threats cannot be addressed effectively with existing traditional threat-modeling approaches. The proposed threat modeling has been applied to three IoT applications: IoT-based smart home environments; IoT-based garment units; and IoT-based water quality management systems, in order to demonstrate the work’s effectiveness. It was seen that when coupling the proposed methodology with the PSM technique and existing threat modeling methods, threats directly affecting users were also identified. This method increases the performance and effectiveness of threat modeling, which leads to increased mitigation of the identified threats. This also leads to an increase in the security of the devices and environment. The final part of the study presents practical mitigation techniques to eliminate threats in IoT devices.

The Internet of Things (IoT) devices is able to communicate with another IoT devices in heterogeneous environments. They are also able to create a network by their own using wireless capabilities without a centralized approach. This network is called wireless mobile ad hoc network (MANET). The MANET facilitate IoT devices to communicate with each other in an infrastructure less network of the Internet of Things environment. The IoT devices can dynamically join, create connection and exchange information among them. The role of cloud in this framework is to store and process the data by IoT devices. The communication Security has been raised as one of the most critical issues of cloud computing where resolving such an issue would result in a constant growth in the use and popularity of cloud. Our purpose of this study is to create a framework for providing the communication in an integrated framework of Cloud and MANET among IoT devices. Our main contribution links a new study that integrates cloud computing to the MANET and provides communication to the internet of things. This study can be used in the framework of the Internet of Things in future.

Seeing is not always believing: Insights on IoT manufacturing from firmware composition analysis and vendor survey

With the advancement in science and technology, the demand for electronic Internet of Things (IoT) devices has increased to store and process digital data. With the advancement in IoT technology, we are more reliant on IoT devices to perform our regular tasks. IoT Forensics deals with the investigation of IoT devices such as smartphones, tablets, smart watches, or any device which is connected to the Internet. The data on these devices can still be retrieved via IoT forensics even if they are destroyed, resold, or misplaced. Before discarding any IoT device, we must consider how to secure the data stored on them. We are then going to discuss the several types of personal data that could be retrieved from discarded IoT devices. Finally, we are going to discuss the protection measures for the safe disposal of IoT devices.

The Internet of Things (IoT) has had a considerable influence on our daily lives by enabling enhanced connection of devices, systems, and services that extends beyond machine-to-machine interactions and encompasses a wide range of protocols, domains, and applications. However, despite privacy concerns shown by IoT users, little has been done to reduce and protect individual information exposure. It is extremely difficult to mitigate IoT devices from reidentification threats which is why it is still a major challenge for IoT users to securely protect their information. The trust controls how we regulate privacy in our IoT platforms in the same way that it governs personal relationships. As IoT devices become increasingly linked, more data is shared across individuals, businesses, governments, and ecosystems. Technologies, sensors, machines, data, and cloud connections all rely largely on trust relationships that have been formed. With the rapid growth of additional types of IoT devices that are being introduced, it, therefore, expands privacy concerns and is difficult to develop trust with an IoT system or device without the option to regulate information privacy settings. Privacy has always been a barrier for many devices as they race for the early adoption of IoT technologies. Several Internet of Things devices or systems will continue to pose privacy threats. As a result, the main objective of this study was to examine the individual understanding of privacy and to promote information privacy protection awareness not only to IoT users but also to organizations that use IoT devices or platforms to run their day-to-day business operations. Furthermore, the objective extends to compare user knowledge and concerns about IoT privacy, as well as to identify any common attitudes and variances. However, in terms of enhancing individuals’ knowledge, an artifact was developed to educate and enhance information privacy awareness among IoT users. A pre- and postquestionnaire was generated to test and validate user knowledge regarding information privacy protection in IoT. The study was conducted using a quantitative research method. Findings indicate that IoT users’ awareness of information privacy protection turned out to be average, suggesting a need for education and awareness. Several participants stated that information privacy protection awareness is required within the community to educate, raise awareness, eliminate human error, and enable individuals to be conscious of their privacy when surfing the Internet.

In the modern security-conscious world, Deep Packet Inspection (DPI) proxies are increasingly often used on industrial and enterprise networks to perform TLS unwrapping on all outbound connections. However, enabling TLS unwrapping requires local devices to have the DPI proxy Certificate Authority certificates installed. While for conventional computing devices this is addressed via enterprise management, it's a difficult problem for Internet of Things (IoT) devices which are generally not under enterprise management, and may not even be capable of it due to their resource-constrained nature. Thus, for typical IoT devices, being installed on a network with DPI requires either manual device configuration or custom DPI proxy configuration, both of which solutions have significant shortcomings. This poses a serious challenge to the deployment of IoT devices on DPI-enabled intranets. The authors propose a solution to this problem: a method of installing on IoT devices the CA certificates for DPI proxy CAs, as well as other security configuration (security bootstrapping). The proposed solution respects the DPI policies, while allowing the commissioning of IoT and IIoT devices without the need for additional manual configuration either at device scope or at network scope. This is accomplished by performing the bootstrap operation over unsecured connection, and downloading certificates using TLS validation at application level. The resulting solution is light-weight and secure, yet does not require validation of the DPI proxy's CA certificates in order to perform the security bootstrapping, thus avoiding the chicken-and-egg problem inherent in using TLS on DPI-enabled intranets.

In the current ongoing world of IoT (Internet of things) devices, it is vital to have a safe, secure and reliable cyberspace. Cyberspace or network is free from all sorts of unethical activities like hacked systems, data breaches and stolen data. For that goal to be accomplished, we need to have a modern, solid and rigid cybersecurity system to stay safe from harm's way. Our research includes recent IoT data security issues and a robust security model that ensures the IoT devices' data security based on a smart city's perspective. According to the recent research data on the vulnerable IoT devices we propose an intelligent and effective security approach to tackle the modern IoT security issues because our data needs to be protected as the IoT devices or “things” as we call it needs to have proper security. A few areas of future research indicate the use of blockchain to resolve the cybersecurity issues of IoT devices are the most promising and exciting.

The number of Internet of Things (IoT) devices has increased recently and will increase further in the future. IoT devices are vulnerable, so vendors update and distribute firmware. At the time of firmware distribution, a huge number of IoT devices may connect to the firmware server and excessive network traffic may occur. Consequently, a method using a peer-to-peer file sharing system and a blockchain has been proposed. One study proposed an update scheme considering incentives for distributors to help with updating. However, this method requires the IoT devices, which have limited processing power, to decrypt encrypted files, and the distribution nodes to pay the transaction cost. This paper proposes a firmware distribution method that provides incentives for distributors to help with distribution to reduce the gas costs, using a smart contract and access control based on update records. The additional computations performed by IoT devices and distributors key management were reduced compared to those in previous studies by using access control instead of encryption. Further, the proposed approach was implemented and evaluated using a Raspberry Pi and laptop. The evaluation demonstrated that the gas cost per update was successfully lowered compared to the costs in previous studies.

The development and use of Internet of Things (IoT) devices have grown significantly in recent years. Advanced IoT device characteristics are mainly to blame for the wide range of applications that may now be achieved with IoT devices. Corporations have begun to embrace the IoT concept. Identifying true and suitable devices, security faults that might be used for bad reasons, and administration of such devices are only a few of the issues that IoT, a new concept in technological progress, provides. In some ways, IoT device traffic differs from regular device traffic. Devices with particular features can be classified into categories, irrespective of their function or performance. Ever-changing and complex environments, like a smart home, demand this classification scheme. A total of 41 IoT devices were employed in this investigation. To build a multiclass classification model, IoT devices contributed 13 network traffic parameters. To further preprocess the raw data received, preprocessing techniques like Normalization and Dataset Scaling were utilized. Feature engineering techniques can extract features from the text data. A total of 117,423 feature vectors are contained in the dataset after stratification, which are used to further improve the classification model. In this study, a variety of performance indicators were employed to show the performance of the logiboosted algorithms. Logi-XGB scored 80.2% accuracy following application of the logit-boosted algorithms to the dataset for classification, whereas Logi-GBC achieved 77.8% accuracy. Meanwhile, Logi-ABC attained 80.7% accuracy. Logi-CBC, on the other hand, received the highest Accuracy score of 85.6%. The accuracy of Logi-LGBM and Logi-HGBC was the same at 81.37% each. Our suggested Logi-CBC showed the highest accuracy on the dataset when compared to existing Logit-Boosted Algorithms used in earlier studies.

With the growth of wireless network technology-based devices, identifying the communication behaviour of wireless connectivity enabled devices, e.g. Internet of Things (IoT) devices, is one of the vital aspects, in managing and securing IoT networks. Initially, devices use frames to connect to the access point on the local area network and then, use packets of typical communication protocols through the access point to communicate over the Internet. Toward this goal, network packet and IEEE 802.11 media access control (MAC) frame analysis may assist in managing IoT networks efficiently, and allow investigation of inclusive behaviour of IoT devices. This paper presents network traffic traces data of D-Link IoT devices from packet and frame levels. Data collection experiment has been conducted in the Network Systems and Signal Processing (NSSP) laboratory at Universiti Brunei Darussalam (UBD). All the required devices, such as IoT devices, workstation, smartphone, laptop, USB Ethernet adapter, and USB WiFi adapter, have been configured accordingly, to capture and store network traffic traces of the 14 IoT devices in the laboratory. These IoT devices were from the same manufacture (D-Link) with different types, such as camera, home-hub, door-window sensor, and smart-plug.

Backscatter communication is an energy-efficient communication technique for the Internet of things (IoT) devices. It enables data transmission by reflecting the incident radio signals. In this paper, we propose a communication mode selection scheme for IoT devices that can communicate using either active transmission or backscattering. In the active transmission mode, the IoT devices can transmit data over narrowband subcarriers using power-domain non-orthogonal multiple access (NOMA). In the backscattering mode, which operates over shorter distance than active transmission, nearby user equipment (UE) devices are used as relays. The UEs receive the backscattered signals from the IoT devices and forward them to the base station. We formulate a connection density maximization problem to select the communication mode used by each IoT device. We determine the IoT device pairing for active transmission mode with NOMA and UE-IoT device association for backscattering mode. The formulated problem is a binary integer programming problem. Although it can be solved optimally, the optimal algorithm incurs exponential computational complexity. Hence, we propose a low-complexity suboptimal algorithm to solve this problem. Results show that our proposed algorithm can enhance the connection density of narrowband IoT systems by up to 64% when compared with using single communication mode.

Due to the rapid growth of the Internet of Things (IoT), researchers have demonstrated various IoT solutions, which are used to interconnect a wide range of IoT devices through the Internet. However, IoT stumbled into vertical silos; the available solutions provide specific IoT infrastructure, devices, protocols, data formats and models. This diversity and heterogeneity lead to interoperability issues. Heterogeneity happens at all IoT layers, especially at the application layer; devices often adopt mutually incompatible application-layer communication protocols to connect devices to IoT services. Furthermore, in order to integrate semantics to raw data, each system uses its one domain-specific ontology to make data more understandable and interpretable by adding semantic annotations. Working in isolation reduces the interoperability among IoT devices and systems, things across domains need to internetwork and collaborate to provide high level IoT services. Therefore, to alleviate the problem of both communication protocol interoperability and semantic interoperability across vertical silos of systems at the application layer, this paper proposes a semantic gateway (SGIoT) that acts as a bridge between heterogeneous sink nodes at the physical level and IoT services. SGIoT enables interconnectivity between communication protocols such as CoAP and MQTT regardless of their communication model, meanwhile it enables semantics integration throu gh cross-domain ontology (CDOnto) for semantic annotation, in order to provide interpretation of messages among IoT applications across domains. Our approach focuses on modularity and extensibility.

SummaryRecently, the deployment of novel smart network concepts, such as the Internet of things (IoT) or machine‐to‐machine communication, has gained more attention owing to its role in providing communication among various smart devices. The IoT involves a set of IoT devices (IoTDs) such as actuators and sensors that communicate with IoT applications via IoT gateways without human intervention. The IoTDs have different traffic types with various delay requirements, and we can classify them into two main groups: critical and massive IoTDs. The fundamental promising technology in the IoT is the advanced long‐term evolution (LTE‐A). In the future, the number of IoTDs attempting to access an LTE‐A network in a short period will increase rapidly and, thus, significantly reduce the performance of the LTE‐A network and affect the QoS required by variant IoT traffic. Therefore, efficient resource allocation is required.In this paper, we propose a priority‐based allocation scheme for multiclass service in IoT to efficiently share resources between critical and massive IoTD traffic based on their specific characteristics while protecting the critical IoTDs, which have a higher priority over the massive IoTDs. The performance of the proposed scheme is analyzed using the Geo/G/1 queuing system focusing on QoS guarantees and resource utilization of both critical and massive IoTDs. The distribution of service time of the proposed system is determined and, thus, the average waiting and service times are derived. The results indicate that the performance of the massive IoTDs depends on the data traffic characteristics of the critical IoTDs. Furthermore, the results emphasize the importance of the system delay analysis and demonstrate its effects on IoT configurations.

The deployment of a client–server-based distributed intelligent system involves application development in both the network domain and the device domain. In the network domain, an application server (typically in the cloud) is deployed to execute the network applications. In the device domain, several Internet of Things (IoT) devices may be configured as, for example, wireless sensor networks (WSNs), and interact with each other through the application server. Developing the network and the device applications are tedious tasks that are the major costs for building a distributed intelligent system. To resolve this issue, a low-code or no-code (LCNC) approach has been purposed to automate code generation. As traditional LCNC solutions are highly generic, they tend to generate excess code and instructions, which will lack efficiency in terms of storage and processing. Fortunately, optimization of automated code generation can be achieved for IoT by taking advantage of the IoT characteristics. An IoT-based distributed intelligent system consists of the device domain (IoT devices) and the network domain (IoT server). The software of an IoT device in the device domain consists of the Device Application (DA) and the Sensor Application (SA). Most IoT LCNC approaches provide code generation in the network domain. Very few approaches automatically generate the DA code. To our knowledge, no approach supports the SA code generation. In this paper, we propose DeviceTalk, an LCNC environment for the DA and the SA code development. DeviceTalk automatically generates the code for IoT devices to speed up the software development in the device domain for a distributed intelligent system. We propose the DeviceTalk architecture, design and implementation of the code generation mechanism for the IoT devices. Then, we show how a developer can use the DeviceTalk Graphical User Interface (GUI) to exercise LCNC development of the device software.