Internet of Things (IoT) devices are rapidly becoming ubiquitous while IoT services are becoming pervasive. Their success has not gone unnoticed and the number of threats and attacks against IoT devices and services are on the increase as well. Cyber-attacks are not new to IoT, but as IoT will be deeply interwoven in our lives and societies, it is becoming necessary to step up and take cyber defense seriously. Hence, there is a real need to secure IoT, which has consequently resulted in a need to comprehensively understand the threats and attacks on IoT infrastructure. This paper is an attempt to classify threat types, besides analyze and characterize intruders and attacks facing IoT devices and services.

/pdf/cyber-security-and-the-internet-of-things-vulnerabilities-457t0muveo.pdf

Cyber Security and the Internet of Things: Vulnerabilities, Threats, Intruders and Attacks

Trust mechanisms in wireless sensor networks: Attack analysis and countermeasures

In the last few years the Internet of Things (IoT) has seen widespreadapplication and can be found in each field. Authentication and accesscontrol are important and critical functionalities in the context of IoTto enable secure communication between devices. Mobility, dynamicnetwork topology and weak physical security of low power devices in IoTnetworks are possible sources for security vulnerabilities. It ispromising to make an authentication and access control attack resistant andlightweight in a resource constrained and distributed IoT environment.This paper presents the Identity Authentication and Capability basedAccess Control (IACAC) model with protocol evaluation and performanceanalysis. To protect IoT from man-in-the-middle, replay and denial ofservice (Dos) attacks, the concept of capability for access control isintroduced. The novelty of this model is that, it presents an integratedapproach of authentication and access control for IoT devices. Theresults of other related study have also been analyzed to validate andsupport our findings. Finally, the proposed protocol is evaluated byusing security protocol verification tool and verification results showsthat IACAC is secure against aforementioned attacks. This paper alsodiscusses performance analysis of the protocol in terms of computationaltime compared to other existing solutions. Furthermore, this paper addresseschallenges in IoT and security attacks are modelled with the use casesto give an actual view of IoT networks.

/pdf/identity-authentication-and-capability-based-access-control-2yluaims6o.pdf

Identity Authentication and Capability Based Access Control (IACAC) for the Internet of Things

http://www.synchromedia.ca/system/files/SurveyRisk.pdf

Taxonomy of information security risk assessment (ISRA)

The demand and growth of indoor positioning has increased rapidly in the past few years for a diverse range of applications. Various innovative techniques and technologies have been introduced but precise and reliable indoor positioning still remains a challenging task due to dependence on a large number of factors and limitations of the technologies. Positioning technologies based on radio frequency (RF) have many advantages over the technologies utilizing ultrasonic, optical and infrared devices. Both narrowband and wideband RF systems have been implemented for short range indoor positioning/real-time locating systems. Ultra wideband (UWB) technology has emerged as a viable candidate for precise indoor positioning due its unique characteristics. This article presents a comparison of UWB and narrowband RF technologies in terms of modulation, throughput, transmission time, energy efficiency, multipath resolving capability and interference. Secondly, methods for measurement of the positioning parameters are discussed based on a generalized measurement model and, in addition, widely used position estimation algorithms are surveyed. Finally, the article provides practical UWB positioning systems and state-of-the-art implementations. We believe that the review presented in this article provides a structured overview and comparison of the positioning methods, algorithms and implementations in the field of precise UWB indoor positioning, and will be helpful for practitioners as well as for researchers to keep abreast of the recent developments in the field.

Precise Indoor Positioning Using UWB: A Review of Methods, Algorithms and Implementations

/pdf/indoor-localisation-with-wireless-sensor-networks-4s8ydc6ucn.pdf

Indoor Localisation with Wireless Sensor Networks

Threat analysis gives how potential adversaries exploit system weakness to achieve their goals. It identifies threats and defines a risk mitigation policy for a specific architecture, functionality and configuration. In a threat analysis security metrics are a challenging requirement in order to determine the status of network security performance and to further enhance it by minimizing exposure to considerable threats and vulnerabilities. In this paper the authors propose a generic methodology for threat analysis and security metrics in order to prioritize threats and vulnerabilities and proceed with security enhancement planning in Personal Networks (PNs).

/pdf/a-threat-analysis-methodology-for-security-evaluation-and-57fdip00zl.pdf

A Threat Analysis Methodology for Security Evaluation and Enhancement Planning

Wireless Sensor Networks (WSNs) have attracted a great deal of research interest during the last few years. Potential applications make them ideal for the development of the envisioned world of ubiquitous and pervasive computing. Localization is a key aspect of such networks, since the knowledge of a sensor's location is critical in order to process information originating from this sensor, or to actuate responses to the environment, or to infer regarding an emerging situation etc. Indoor localization in the literature is based on various techniques, ranging from simple Received-Signal-Strength (RSS) to the more demanding Time-of-Arrival (ToA) or Direction- of-Arrival (DoA) of the incoming signals. In the context of several EU research projects, various WSN platforms for indoor localization have been developed, evaluated and tested within real-world emergency medical services applications. These platforms were selected in order to deal with all principal localization techniques, namely RSSI, ToA and DoA. Deployment and real-world considerations are discussed, measurements results are presented and overall system evaluation conclusions are drawn regarding indoor localization capabilities of WSNs.

/pdf/indoor-localization-with-wireless-sensor-networks-2t9391nm4z.pdf

Indoor localization with wireless sensor networks

In this paper we present a novel taxi on demand (ToD) management system that implements a location based and traffic-sensing approach and incorporates automated taxi booking, dispatching, and monitoring application ToD solution effectively addresses current taxi sector needs, and could be potentially expanded to emerging car-pooling/sharing models, allowing integration between modes of transport in urban/densely populated environments

ToD: An Intelligent Location-Based Transport Management System

In this paper the authors propose a cross-layer security management plane, with a main actor security, privacy and trust manager, which addresses: a) the defined requirements taking into account the diverse application spaces and their scenarios, b) the diverse node capabilities which is a characteristic for wireless sensor networks architecture and c) the change of the context and preferences of the user in the scenarios where end user is heavily involved. Being context aware the framework assures secure interactions, providing adaptability and flexibility. The solution is presented along with a medical care scenario example, to better explain the functionality of the blocks forming the simplified architecture and their interactions, which are also depicted through several communication diagrams.

http://ieeexplore.ieee.org/iel5/4658782/4747505/04747558.pdf

Dimitris M. Kyriazanos

Papers

Indoor Localisation with Wireless Sensor Networks

A Threat Analysis Methodology for Security Evaluation and Enhancement Planning

Indoor localization with wireless sensor networks

ToD: An Intelligent Location-Based Transport Management System

A Security, Privacy and trust architecture for Wireless Sensor Networks