Revolutionizing Access Control in IoT Systems through Blockchain Technology

Internet of Things (IoT) refers to the network of interconnected smart physical objects that collect and exchange information for enabling smart applications and services. IoT devices are often battery powered and lack computational resources and as a consequence, traditional measures of providing security is not feasible in IoT systems which leads to major security vulnerabilities. Blockchain technology has proven to be a secure medium of transaction in trustless public networks and has the potential to resolve the security vulnerabilities intrinsic to IoT systems. However, reaching consensus throughout a blockchain network is computationally demanding and requires large amount of energy. Moreover, typical transactions in blockchain based applications are slow, compounding the issues in adopting blockchain technology in IoT systems. In this work, a lightweight consensus algorithm called Proof-of-Authentication (PoAh), was implemented on resource-constrained IoT edge nodes and evaluated in terms of latency and energy consumption. The implemented consensus algorithm reduces latency in block validation to 29.35 ms and energy consumption to 44.31 mJ for each transaction, demonstrating promise and potential, to feasibly implement blockchain technology in IoT systems.

The developers and users of Internet of Things (IoT) systems and devices bear a collective obligation to ensure that IoT systems and devices do not make the Internet and other users vulnerable to any potential harm. This chapter proposes a novel network secure framework that can be adapted to the future IoT and finally gives details for the security verification system design. This framework should focus on enhancing the efficacy, dependability, accountability, and regulation in the overall structure that checks the security issues. The chapter discusses the structuring of a security authentication system in the field of IoT. It presents the factors that pose a threat to the IoT security. These include Unprotected Network services, Cloud, mobile and an absence of security configuration. The chapter illustrates the essential components of IoT security and lists the potential challenges in terms of IoT security. It also discusses the concepts representing the risks that increase the probability of intrusions in the IoT devices.

The Internet of Things (IoT) has had a considerable influence on our daily lives by enabling enhanced connection of devices, systems, and services that extends beyond machine-to-machine interactions and encompasses a wide range of protocols, domains, and applications. However, despite privacy concerns shown by IoT users, little has been done to reduce and protect individual information exposure. It is extremely difficult to mitigate IoT devices from reidentification threats which is why it is still a major challenge for IoT users to securely protect their information. The trust controls how we regulate privacy in our IoT platforms in the same way that it governs personal relationships. As IoT devices become increasingly linked, more data is shared across individuals, businesses, governments, and ecosystems. Technologies, sensors, machines, data, and cloud connections all rely largely on trust relationships that have been formed. With the rapid growth of additional types of IoT devices that are being introduced, it, therefore, expands privacy concerns and is difficult to develop trust with an IoT system or device without the option to regulate information privacy settings. Privacy has always been a barrier for many devices as they race for the early adoption of IoT technologies. Several Internet of Things devices or systems will continue to pose privacy threats. As a result, the main objective of this study was to examine the individual understanding of privacy and to promote information privacy protection awareness not only to IoT users but also to organizations that use IoT devices or platforms to run their day-to-day business operations. Furthermore, the objective extends to compare user knowledge and concerns about IoT privacy, as well as to identify any common attitudes and variances. However, in terms of enhancing individuals’ knowledge, an artifact was developed to educate and enhance information privacy awareness among IoT users. A pre- and postquestionnaire was generated to test and validate user knowledge regarding information privacy protection in IoT. The study was conducted using a quantitative research method. Findings indicate that IoT users’ awareness of information privacy protection turned out to be average, suggesting a need for education and awareness. Several participants stated that information privacy protection awareness is required within the community to educate, raise awareness, eliminate human error, and enable individuals to be conscious of their privacy when surfing the Internet.

A survey of trust computation models for service management in internet of things systems

With the rapid growth of digital data and inter-connected devices, the integration of blockchain and Internet of Things technology offers a promising chance to revolutionize data management approaches. With today's global connectivity, the management and securing of ever-increasing amounts the amount of data produced by Internet of Things (IoT) devices is becoming an increasing concern. This study investigates a new solution to address such a concern by integrating blockchain technology into IoT systems. The aim is to develop a strong framework that takes advantage of the decentralized and secure character of blockchain and the wall-to-wall connectivity offered by the IoT. This integration is intended to address important needs such as data integrity, The integration aims to tackle crucial issues like data integrity, privacy, and unauthorized access. With the connectivity and sensing capabilities of the IoT, along with the blockchain technology of decentralized consensus and immutable ledgers, businesses are able to develop secure systems to retrieve, transfer, and store such data. In the experiments conducted on the Ethereum blockchain platform, it has been found that the blockchain and IoT technology solution not only secures data but also facilitates information management. The experiment results demonstrate that the proposed solution is able to protect against tampering, increase the transparency of transactions, and to minimize the chances of unauthorized access. The framework is scalable and highly adaptable, and it is therefore a promising solution for various applications. This framework employs an innovative approach to ensure secure and efficient data management.

With rapid advancements in the technology, almost all the devices around are becoming smart and contribute to the Internet of Things (IoT) network. When a new IoT device is added to the network, it is important to verify the authenticity of the device before allowing it to communicate with the network. Hence, access control is a crucial security mechanism that allows only the authenticated node to become the part of the network. An access control mechanism also supports confidentiality, by establishing a session key that accomplishes secure communications in open public channels. Recently, blockchain has been implemented in access control protocols to provide a better security mechanism. The foundation of this survey article is laid on IoT, where a detailed description on IoT, its architecture and applications is provided. Further, various security challenges and issues, security attacks possible in IoT and their countermeasures are also provided. We emphasize on the blockchain technology and its evolution in IoT. A detailed description on existing consensus mechanisms and how blockchain can be used to overpower IoT vulnerabilities is highlighted. Moreover, we provide a comprehensive description on access control protocols. The protocols are classified into certificate-based, certificate-less and blockchain-based access control mechanisms for better understanding. We then elaborate on each use case like smart home, smart grid, health care and smart agriculture while describing access control mechanisms. The detailed description not only explains the implementation of the access mechanism, but also gives a wider vision on IoT applications. Next, a rigorous comparative analysis is performed to showcase the efficiency of all protocols in terms of computation and communication costs. Finally, we discuss open research issues and challenges in a blockchain-envisioned IoT network.

Anomaly detection framework for Internet of things traffic using vector convolutional deep learning approach in fog environment

The Internet of Things (IoT) is emerging as a new trend mainly employed in developing numerous vital applications. These applications endure on a federal storage framework primarily concerned with multiple issues. Blockchain technology (BC) is one of the supportive methods for developing IoT-based applications. It is employed to solve the problems encountered in IoT applications. The attack Distributed Denial of Service (DDoS) is one of the leading security attacks in IoT systems. Attackers can effortlessly develop the exposures of IoT gadgets and restrain them as fragments of botnets to commence DDoS threats. The IoT devices are said to be resource-constrained with computing resources and restricted memory. As a developing technology, BC holds the possibility of resolving security problems in IoT. This paper proposes the Metaheuristic-Optimized Blockchain Framework for Attack Detection using a Deep Learning Model (MOBCF-ADDLM) method. The main intention of the MOBCF-ADDLM method is to deliver an effective method for detecting DDoS threats in an IoT environment using advanced techniques. The BC technology is initially applied to mitigate DDoS attacks by presenting decentralized security solutions. Furthermore, data preprocessing utilizes the min-max scaling method to convert input data into a beneficial format. Additionally, feature selection (FS) is performed using the Aquila optimizer (AO) technique to recognize the most relevant features from input data. The attack classification process employs the deep belief network (DBN) technique. Finally, the red panda optimizer (RPO) model modifies the hyper-parameter values of the DBN model optimally and results in higher classification performance. A wide range of experiments with the MOBCF-ADDLM approach is performed under the BoT-IoT Binary and Multiclass datasets. The performance validation of the MOBCF-ADDLM approach portrayed a superior accuracy value of 99.22% over existing models.

The Internet of Things (IoT) has revolutionised the way people live and work, and its increasing popularity has led to the widespread adoption of smart homes. However, the lack of interoperability among IoT devices and systems used in smart homes limits their capacity to enhance the user experience and improve energy efficiency. Therefore, this study focuses on improving interoperability between various IoT systems and devices. It was anticipated that the research would contribute to the creation of a more cohesive and integrated smart home environment by helping to develop a data analytics framework that enables the integration and analysis of data from various devices. The study then produces an intended user design strategy for smart homes that takes into account users' wants, preferences, and behaviours during the design phase. The goal of this project was to create smart houses that are more intelligent, environmentally green, and user-friendly and that will benefit both individuals and the whole society.

Usually, IoT devices are designed to perform specific tasks, while robots have to adapt to unpredictable situations. Artificial intelligence and machine learning help these robots cope with the emerging unexpected conditions. The Internet of Robotic Things is an evolving concept that brings together all-encompassing sensors and devices with robotic and autonomous systems. Both IoT devices and robots rely on sensors to understand the surrounding environment, to process data quickly, and to decide how to respond. Nevertheless, while most IoT systems can handle only well-defined tasks, robots can handle expected situations as well. The Internet of Robotic Things is a better Internet of Things (IoT) solution due to its ability to bridge the gap between IT and real operations. The IoRT may face several challenges in power consumption and network bandwidth limitation due to the growth in the information dissemination over the Robotic network. The main objective of this paper is to introduce an overview of the concepts and challenges in the Internet of Robotic Things based on Fog Computing technique. Further, a framework of Fog based IoRT is introduced.

Deep learning-enabled anomaly detection for IoT systems

The Internet of Things (IoT) is a vast network of real, tangible objects or "things" that can communicate and share data with other systems and gadgets over the Internet. A vital component of assuring the secure and dependable operation of IoT systems and devices is IoT security. Attackers may use IoT devices to get unauthorized access, change functionality, or compromise the data that the device collects and transmits. The risks of IoT security breaches grow as more devices connect and exchange sensitive data. To check the vulnerability in Iot devices, a novel Blockchain enabled Iot based Security Assessment for intrusion (Block-ISAI) technique has been proposed. Bag of Words (BoW) technique is used for feature extraction of API documents which helps to make the document simpler. Blockchain technology is utilized for secure data storage and IoT device registration. In order to detect intrusion, a deep learning architecture is designed using the verified data The attack is either detected or not detected when the vulnerability is found using the GloVe-CNN-BiLSTM Model. If the vulnerability is detected then alerts will be given. Utilizing evaluation measures like accuracy, time efficiency, precision, F1 score, detection rate, recall, false alarm rate, usability and reliability the efficacy of the suggested ISAI technique has been assessed. By the comparison analysis, the proposed ISAI technique’s detection rate is 18.22%, 19.43%, and 3.13% higher than the existing HIDS, NIDS, and ML-DDoS techniques respectively. The accuracy of the proposed system is increased by 0.69%, 6.04%, and 36.15% as compared to the HIDS, NIDS, and ML-DDoS method using UNSW-NB 15 dataset and increases by 2.37%, 18.32%, and 5.95% using KDDCUP 19 dataset respectively.

Since the start of Bitcoin in 2008[1], blockchain technology emerged as the next revolutionary technology. Though blockchain started off as a core technology of Bitcoin, its use cases are expanding to many other areas including finances, Internet of Things (IoT), security and such[2]. Currently, many private and public sectors are diving into the technology[3]. Aside from that, as software and hardware improve, we would see the beginning of IoT. And those IoT devices need to communicate and synchronize with each other. But in situations where more than thousands or tens of thousands of IoT devices connected, we expect that using current model of server-client may have some limitations and issues while in synchronization. So, we propose using blockchain to build IoT system. Using blockchain, we can control and configure IoT devices. We manage keys using RSA public key cryptosystems where public keys are stored in Ethereum and private keys are saved on individual devices. Specifically, we choose Ethereum as our blockchain platform because using its smart contract, we can write our own Turing-complete code to run on top of Ethereum. Thus, we can easily manage configuration of IoT devices and build key management system. Even though we can simply use account as a key management system, which most of blockchain platform supports, we decide to use Ethereum because we can manage the system in a more fine-grained way. For the proof of a concept, we use a few IoT devices instead of a full system of IoT system, which consists of thousands of IoT devices. But in our later study, we would like to build a fully scaled IoT system using blockchain.

Internet of Things, cognitive systems, and blockchain technology are three fields which have created numerous revolutions in software development. It seems that a combination among these fields may results in emerging a high potential and interesting field. Therefore, in this paper, we propose a framework for Internet of Things based on cognitive systems and blockchain technology. To the best of our knowledge, there is no framework for Internet of Things based on cognitive systems and blockchain. In order to study the applicability of the proposed framework, a recommender system based on the proposed framework is suggested. Since the proposed framework is novel, the suggested recommender system is novel. The suggested recommender system is compared with the existing recommender systems. The results show that the suggested recommender system has several benefits which are not available in the existing recommender systems.

The prevalence of Internet of Things (IoT) allows heterogeneous embedded smart devices to collaboratively provide smart services with or without human intervention. While leveraging the large-scale IoT-based applications like Smart Gird or Smart Cities, IoT also incurs more concerns on privacy and security. Among the top security challenges that IoT face, access authorization is critical in resource sharing and information protection. One of the weaknesses of today's access control (AC) is the centralized authorization server, which can be the performance bottleneck or the single point of failure. In this paper, BlendCAC, a blockchain-enabled decentralized capability-based AC is proposed for the security of IoTs. The BlendCAC aims at an effective access control processes to devices, services and information in large scale IoT systems. Based on the blockchain network, a capability delegation mechanism is suggested for access permission propagation. A robust identity-based capability token management strategy is proposed, which takes advantage of a smart contract for registration, propagation and revocation of the access authorization. In the proposed BlendCAC scheme, IoT devices are their own master to control their resources instead of being supervised by a centralized authority. Implemented and tested on a Raspberry Pi device and on a local private blockchain network, the experimental results demonstrate the feasibility of the proposed BlendCAC approach to offer a decentralized, scalable, lightweight and fine-grained AC solution to IoT systems.