2019年物联网硬件安全机制深度调查

需积分: 10 54 浏览量更新于2024-07-15 收藏 4.29MB PDF 举报

本文档《2019年物联网硬件安全机制调查》(A Survey on Hardware-based Security Mechanisms for Internet of Things)发表于2019年，作者是来自北方亚利桑那大学的阿里·雷扎·沙姆索霍拉、阿什维贾·科尔纳达和法特梅赫·阿夫加哈，以及肯塔基大学通信与信息学院的谢里尔·艾达利。随着物联网在智能城市、工业自动化、智能交通系统和智能健康设施等领域广泛应用，这些新兴网络面临着严峻的安全挑战。传统的网络安全解决方案往往借鉴自通信网络，但忽视了物联网的独特特性，如大量节点、网络异质性、节点的有限能源、通信和计算能力。文章指出，由于物联网的特殊性，如设备数量庞大、技术多样且节点资源受限，现有的通用安全方法并不能完全满足其需求。主要的挑战包括如何设计和实现针对物联网环境的专用安全机制，以应对以下问题： 1. **节点安全**：在物联网中，大量的传感器和执行器节点容易成为攻击目标，确保每个节点的安全性至关重要，防止数据篡改或被恶意控制。 2. **身份验证**：由于缺乏强大的中央认证机构，如何实现实时、可靠的身份验证，防止未经授权的访问是关键。 3. **数据隐私**：物联网产生的海量数据需要有效的加密和隐私保护措施，以防止敏感信息泄露。 4. **资源限制**：考虑到节点的低功耗和计算能力，设计轻量级的安全算法和协议至关重要。 5. **安全性与能源效率**：找到一个平衡点，即在保障安全的同时，优化设备的能耗管理，延长设备使用寿命。 6. **安全更新与维护**：在分布式网络中，如何高效地进行安全补丁的推送和升级，以抵御新的威胁。 7. **安全协议设计**：针对物联网的网络架构（如无线传感器网络、物联网云平台等）设计定制化的安全协议，增强整个系统的安全性。 8. **恶意行为检测**：实时监测并检测各种可能的异常行为，包括DoS攻击、蠕虫病毒等，及时响应并采取防御措施。 9. **标准和法规遵从**：遵循国际和行业的安全标准，如GDPR等，确保数据合规处理。这篇综述性论文对物联网安全的当前状况进行了深入剖析，并探讨了利用硬件基础来提升物联网安全的一些潜在策略和研究方向。它为研究人员、工程师和政策制定者提供了一个框架，以便更好地理解和应对物联网领域的安全挑战。通过结合硬件层面的创新，诸如采用安全芯片、固件安全和物理隔离等手段，有望构建更为稳固和可扩展的物联网安全体系。

6 Shamsoshoara and Korenda, et al.

Table 2. Abbreviation Table

Abbreviation Paraphrase Abbreviation Paraphrase

AES Advanced Encryption Systems CPS Cyber Physical Systems

CRP Challenge Response Pair DoS Denial of Service

DDoS Distributed DoS DES Data Encryption System

DHT Distributed Hash Tag ECC Elliptic Curve Cryptography

HSM Hardware Security Modules IC Integrated Circuit

ICN Information Centric Network IoT Internet of Things

IP Intellectual Property LDPC Low Density parity Check

MRAM Magnetoresistive Random Access Memory MQTT Message Queuing Telemetry Transport

NVM Non-Volatile Memory OSI Open System Interconnection

OSN Online Social Network PKI Public Key Infrastructure

PUF Physically Unclonable Function RE-RAM REsistve Random Access Memory

RF Radio Frequency RFID Radio Frequency Identication

RSA Rivest Shamir Aldeman SDA Software Dened Network

SEA Secure and Ecient Architecture SEM Scanning Electron Microscope

SMB Server Message Block SoC System on Chip

SOA Secure-Oriented Architecture SS Secure Sketch

SSL Secure Socket Layer TCP Transmission Control Protocol

TSL Transport Layer Security ULP Ultra Low Power

UUID Universally Unique IDentier WBC White Box Cryptography

The key contribution of this survey compared to the previously published surveys in the area of IoT security

is studying the role of memory-based PUFs in authentication and identication of the various IoT devices. More

importantly, we discuss the potential advantages and challenges of using PUF-based secret key generation mechanisms

to add another level of security to popular key-based cryptographic methods. Such mechanisms, if successful can

enhance the security of a huge number of IoT devices against physical attacks. To the best of our knowledge, the current

memory-based PUF techniques do not have the required robustness and reliability to generate fully reproducible secret

keys as required in cryptographic systems. This need calls for new PUF generation technologies and robust mechanisms

for key generation as discussed in this paper.

This survey paper is organized as follows. In Section 2.1, various security challenges in dierent domains of IoT

networks are presented, with a focus on the applications, architecture, communications, and data domains. In Sections

2.2 and 2.3, dierent attacks in an IoT network are briey described. Section 3 explains the chain of integrated circuit

manufacturing and points out hardware attacks based on the vulnerable points. Section 5 reviews the PUFs which

are based on static random access memories. In Section 4, the concept of PUF, their classication along with their

application in dierent security applications are discussed. In Section 6, ReRAM-based PUFs are explained in details

and the challenges in using them for key generation is discussed. In Section 7, the use of fuzzy extractors to generate

keys from noisy data is described. In 8, we provide a survey on the state-of-the-art key generation mechanisms. In

Section 9, the concluding remarks and future directions of research are discussed.

1.2 Abbreviation Table

All of the abbreviations used throughout this paper are summarized in Table 2.

Manuscript submitted to ACM

A Survey on Hardware-based Security Mechanisms for Internet of Things 7

Fig. 3. Domains and security concepts in IoT

2 SECURITY CHALLENGES AND ATTACKS IN IOTS

2.1 Security Taxonomy

In this paper, we focus on the security challenges of IoTs and the potential impact of PUF technology to address

some of these challenges. In IoT networks, a large number of sensors and devices are connected to the Internet which

forms a huge network with mobility and heterogeneity characteristics that entangles protecting the network from

security attacks. Moreover, the limited energy and computation capability of IoT nodes restrict the utilization of some

conventional security mechanisms in these networks [

108

]. One key challenge related to utilizing some traditional

security protocols is the heterogeneous nature of IoT networks due to the wide variety of applications of these networks.

As a result, dierent applications require dierent protection mechanisms. In most scenarios, these applications can

be categorized by dierent characteristics such as user association, openness, and heterogeneity. The heterogeneity

of IoTs can degrade the eciency of cryptographic methods that rely on the key generation and key exchange [

190

Furthermore, noting the characteristics of IoT networks, the security attacks such as DoS, routing attack, replay attack,

man-in-the-middle, side channel attack, node capture, and mass node authentication are common threats in these

networks.

Figure 3 shows the various security concepts for IoT based on four domains namely, application, architecture,

communication, and data. Based on these stack layers, a security taxonomy can be dened in IoT. Next, dierent

concepts of security for each of the application, data, communication, and architecture domains are introduced. Then,

dierent sub-domains as authentication, authorization, trust establishment, and exhaustion of resource are explained

for the application.

2.1.1 Data. One of the important aspects of security in IoT networks is data privacy and condentiality which remain

critical concerns [

]. In general, condentiality is a security concept which ensures that unauthorized users cannot

Manuscript submitted to ACM

剩余32页未读，继续阅读

元辰辰辰辰辰辰

粉丝: 54
资源: 76

2019年物联网硬件安全机制深度调查

SAE-2020-J3101-硬件安全标准.pdf

Packt.Hands-On.Spring.Security.5.for.Reactive.Applications

Mcgraw-Hill-Robot.Mechanisms.And.Mechanical.Devices.Illustrated-(2003)

《Study of Security Mechanisms inside Linux Kernel 》.pdf

Machines-and-Mechanisms 4th Edition.pdf

JEDEC JEP122H-2016 Failure Mechanisms And Models For Semiconductor Devices - 完整英文版（111页）.pdf

java-security-mechanisms-code.rar_java security

A General Survey on Attention Mechanisms in Deep Learning.pdf

jwts-not-safe-e-book.pdf

elasticsearch-py-readthedocs-io-en-7.7.1.pdf

最新资源