Publicação

Safeguarding from abuse by IoT vendors: edge messages verification of cloud-assisted equipment

Ver documento

Detalhes bibliográficos
Resumo:The fact that most IoT solutions are provided by 3rd-parties, along with the pervasiveness of the collected data, raises privacy and security concerns. There is a need to verify which data is being sent to the 3rd-party, as well as preventing those channels from becoming an exploitation avenue. We propose to use existing API definition languages to create contracts which define the data that can be transmitted, in what format, and with which constraints. To verify the compliance with these contracts, we propose a converging "Multi-Access Edge Computing" architecture which validates RESTalike API requests/responses against a Swagger schema. We deal with encrypted traffic using an SFC-enabled Man-in-the-Middle, allowing us to do verifications in "real-time". We devised a Proof of Concept and shown that we were able to detect (and stop) contract violations.
Autores principais:Cunha, Vítor A.
Outros Autores:Silva, Eduardo da; Carvalho, Marcio B. de; Corujo, Daniel; Barraca, João P.; Gomes, Diogo; Schaeffer-Filho, Alberto E.; Santos, Carlos R. P. dos; Granville, Lisandro Z.; Aguiar, Rui L.
Ano:2019
País:Portugal
Tipo de documento:capítulo de livro
Tipo de acesso:acesso restrito
Instituição associada:Universidade de Aveiro
Idioma:inglês
Origem:RIA - Repositório Institucional da Universidade de Aveiro

Registos relacionados

Atividades financiadas

Não foram encontrados projetos financiados.

Registos relacionados