Publication

A network service for preventing data leakage from IoT cloud-assisted equipment

View document

Bibliographic Details
Summary:The fact that most IoT solutions are provided by third parties, along with the pervasiveness of the collected data, raises privacy and security concerns. There is a need to verify which data is being sent to the third party, as well as preventing those channels from becoming an exploitation avenue. We propose to use existing API definition languages to create contracts which define the data that can be transmitted, their format and constraints. To verify the compliance with these contracts, we propose a Network Service architecture which validates REST-like API requests/responses against a Swagger schema. We deal with encrypted traffic using an Service Function Chaining (SFC)-enabled Man-in-the-Middle (MITM), allowing verifications in “real-time.” We devised a Proof of Concept and showed that we were able to detect (and stop) contract violations.
Main Authors:Cunha, Vitor A.
Other Authors:Silva, Eduardo da; Carvalho, Marcio B. de; Corujo, Daniel; Barraca, João P.; Gomes, Diogo; Schaeffer-Filho, Alberto E.; Santos, Carlos R. P. dos; Granville, Lisandro Z.; Aguiar, Rui L.
Year:2019
Country:Portugal
Document type:book part
Access type:open access
Associated institution:Universidade de Aveiro
Language:English
Origin:RIA - Repositório Institucional da Universidade de Aveiro

Similar Items

Funded activities

No funded projects found.

Similar Items