Security Assessment of Modern Data Aggregation Platforms in the Internet of Things

Authors : Hunor SÁNDOR, Béla GENGE, Zoltán GÁL

Pages : 92-103

View : 58 | Download : 12

Publication Date : 2015-09-29

Article Type : Research Paper

Abstract :With the popularity of the Internet of Things on the rise, sensor networks have become essential parts of traditional Information and Communication Technology insert ignore into journalissuearticles values(ICT); infrastructures in a wide variety of applications. However, their increasing complexity, inter-connectivity, and pervasive implementation, exposes these infrastructures to a large variety of security threats. As a result, practical security analysis needs to be performed to evidentiate the possible vulnerable points in IoT infrastructures. In this work we consider a typical architecture of a data aggregation platform with publish-subscribe support composed of interconnected sensor and ICT infrastructures. We present a comprehensive threat analysis by considering the availability, integrity, and confidentiality security objectives. We describe the experimental results of a case study performed on a real, laboratory-scale implementation of an IoT-based application. Finally, we demonstrate that modern IoT-based software are susceptible to cyber attacks that use traditional attack vectors and recently reported vulnerabilities, e.g., Heartbleed and Shellshock.
Keywords : Sensor Data Aggregation, Heterogeneous Infrastructures, Threat Analysis, Attack Tree

ORIGINAL ARTICLE URL