Internet of Things (IoT) is playing a more and more important role after its showing up, it covers from traditional equipment to general household objects such as WSNs and RFID. With the great potential of IoT, there come all kinds of challenges. This paper focuses on the security problems among all other challenges. As IoT is built on the basis of the Internet, security problems of the Internet will also show up in IoT. And as IoT contains three layers: perception layer, transportation layer and application layer, this paper will analyze the security problems of each layer separately and try to find new problems and solutions. This paper also analyzes the cross-layer heterogeneous integration issues and security issues in detail and discusses the security issues of IoT as a whole and tries to find solutions to them. In the end, this paper compares security issues between IoT and traditional network, and discusses opening security issues of IoT.

https://csi.dgist.ac.kr/uploads/Seminar/1407_IoT_SSH.pdf

Security of the Internet of Things: perspectives and challenges

Recognizing the mannerism ways to get this books computer organization and design the hardware software interface 4th fourth edition by patterson hennessy is additionally useful. You have remained in right site to begin getting this info. acquire the computer organization and design the hardware software interface 4th fourth edition by patterson hennessy join that we manage to pay for here and check out the link.

[서평]「Computer Organization and Design, The Hardware/Software Interface」

In this paper we propose a new family of very efficient hardware oriented block ciphers. The family contains six block ciphers divided into two flavors. All block ciphers share the 80-bit key size and security level. The first flavor, KATAN, is composed of three block ciphers, with 32, 48, or 64-bit block size. The second flavor, KTANTAN, contains the other three ciphers with the same block sizes, and is more compact in hardware, as the key is burnt into the device (and cannot be changed).

The smallest cipher of the entire family, KTANTAN32, can be implemented in 462 GE while achieving encryption speed of 12.5 KBit/sec (at 100 KHz). KTANTAN48, which is the version we recommend for RFID tags uses 588 GE, whereas KATAN64, the largest and most flexible candidate of the family, uses 1054 GE and has a throughput of 25.1 Kbit/sec (at 100 KHz).

/pdf/katan-and-ktantan-a-family-of-small-and-efficient-hardware-1nbl4htw1x.pdf

KATAN and KTANTAN -- A Family of Small and Efficient Hardware-Oriented Block Ciphers

The B Book

We present PROB, an animation and model checking tool for the B method PROB's animation facilities allow users to gain confidence in their specifications, and unlike the animator provided by the B-Toolkit, the user does not have to guess the right values for the operation arguments or choice variables PROB contains a model checker and a constraint-based checker, both of which can be used to detect various errors in B specifications We present our first experiences in using PROB on several case studies, highlighting that PROB enables users to uncover errors that are not easily discovered by existing tools

ProB: A model checker for B

Smart Card Research and Advanced Application

Mathematical Algorithms.- The Polynomial Composition Problem in (?/n?)[X].- Enhance Multi-bit Spectral Analysis on Hiding in Temporal Dimension.- Secure Delegation of Elliptic-Curve Pairing.- Side Channel Analysis.- Side-Channel Leakage across Borders.- Designing a Side Channel Resistant Random Number Generator.- Simple Power Analysis on Exponentiation Revisited.- Atomicity Improvement for Elliptic Curve Scalar Multiplication.- Systems.- Key-Study to Execute Code Using Demand Paging and NAND Flash at Smart Card Scale.- Firewall Mechanism in a User Centric Smart Card Ownership Model.- Logical Attacks.- Combined Attacks and Countermeasures.- Attacks on Java Card 3.0 Combining Fault and Logical Attacks.- Fault Analysis.- Improved Fault Analysis of Signature Schemes.- When Clocks Fail: On Critical Paths and Clock Faults.- Privacy.- Modeling Privacy for Off-Line RFID Systems.- Developing Efficient Blinded Attribute Certificates on Smart Cards via Pairings.- On the Design and Implementation of an Efficient DAA Scheme.

Smart card research and advanced application : 9th IFIP WG 8.8/11.2 international conference CARDIS 2010 Passau, Germany, April 14-16, 2010 : proceedings

The Java Card uses two components to ensure the security of its model. On the one hand, the byte code verifier (BCV) checks, during an applet installation, if the Java Card security model is ensured. This mechanism may not be present in the card. On the other hand, the firewall dynamically checks if there is no illegal access. This paper describes two attacks to modify the Java Card control flow and to execute our own malicious byte code. In the first attack, we use a card without embedded security verifier and we show how it is simple to change the return address of a current function. In the second attack, we consider the hypothesis that the card embeds a partial implementation of a BCV. With the help of a laser beam, we are able to change the execution flow.

/pdf/combined-software-and-hardware-attacks-on-the-java-card-1kgc98w9rm.pdf

Combined software and hardware attacks on the java card control flow

This paper presents a method to inject a mutable Java Card applet into a smart card. This code can on demand parse the memory in order to search for a given pattern and eliminate it. One of these key features is to bypass security checks or retrieve secret data from other applets. We evaluate the countermeasures against this attack and we show how some of them can be circumvented and we propose to combine this attack with others already known.

Developing a Trojan applets in a smart card

Ransomware are malicious software that encrypt their victim’s data and only return the decryption key in exchange of a ransom. After presenting their characteristics and main representatives, we introduce two original countermeasures allowing victims to decrypt their files without paying. The first one takes advantage of the weak mode of operation used by some ransomware. The second one intercept calls made to Microsoft’s Cryptographic API. Both methods must be active before the attack takes place, and none is general enough to handle all ransomware. Nevertheless our experimental results show that their combination can protect users from 50% of the active samples at our disposal.

/pdf/ransomware-and-the-legacy-crypto-api-1thjz9zm1a.pdf

Jean-Louis Lanet

Papers

Smart Card Research and Advanced Application

Smart card research and advanced application : 9th IFIP WG 8.8/11.2 international conference CARDIS 2010 Passau, Germany, April 14-16, 2010 : proceedings

Combined software and hardware attacks on the java card control flow

Developing a Trojan applets in a smart card

Ransomware and the Legacy Crypto API